CVE-2007-4331 PHP remote file inclusion vulnerability in index.php in FindNix allows remote attackers to include the contents of arbitrary URLs and conduct cross-site scripting (XSS) attacks via a URL in the page p...
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in index.php in FindNix allows remote attackers to include the contents of arbitrary URLs and conduct cross-site scripting (XSS) attacks via a URL in the page parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ctw design findnix | All versions | No fix listed |
References
- 38709 vdb-entry
- 2992 third-party-advisory
- 20070809 FinDix Remote File Inclusion Vulnerability mailing-list
- findnix-index-file-include(35920) vdb-entry