CVE-2007-4341 PHP remote file inclusion vulnerability in adm/my_statistics.php in Omnistar Lib2 PHP 0.2 allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter.
HighCVSS 7.5
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in adm/my_statistics.php in Omnistar Lib2 PHP 0.2 allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| omnistar lib2 php library | = 0.2 | No fix listed |
References
- 38716 vdb-entry
- 3006 third-party-advisory
- 20070811 Lib2 PHP v0.2 (DOCUMENT_ROOT) Remote File Inclusion Vulnerability mailing-list
- 25274 exploit vdb-entry
- lib2-mystatistics-file-include(35969) vdb-entry