CVE-2007-4737 Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library (STPHPLibrary) 0.8.0 allow remote attackers to execute arbitrary PHP code via a URL in the STPHPLIB_DIR parameter to (1) stp...
HighCVSS 7.5
EPSS 8.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library (STPHPLibrary) 0.8.0 allow remote attackers to execute arbitrary PHP code via a URL in the STPHPLIB_DIR parameter to (1) stphpapplication.php, (2) stphpbtnimage.php, or (3) stphpform.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| speedtech stphplibrary | = 0.8.0 | No fix listed |
References
- 38929 vdb-entry
- 38930 vdb-entry
- 38931 vdb-entry
- 26658 third-party-advisory vendor-advisory
- 25525 vdb-entry
- ADV-2007-3092 vdb-entry
- speedtech-stphplibdir-file-include(36416) vdb-entry
- 4358 exploit