CVE-2007-4738 Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library (STPHPLibrary) 0.8.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) db_conf or (2) ADODB_DIR para...
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library (STPHPLibrary) 0.8.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) db_conf or (2) ADODB_DIR parameter to utils/stphpimage_show.php; or a URL in the STPHPLIB_DIR parameter to (3) stphpbutton.php, (4) stphpcheckbox.php, (5) stphpcheckboxwithcaption.php, (6) stphpcheckgroup.php, (7) stphpcomponent.php, (8) stphpcontrolwithcaption.php, (9) stphpedit.php, (10) stphpeditwithcaption.php, (11) stphphr.php, (12) stphpimage.php, (13) stphpimagewithcaption.php, (14) stphplabel.php, (15) stphplistbox.php, (16) stphplistboxwithcaption.php, (17) stphplocale.php, (18) stphppanel.php, (19) stphpradiobutton.php, (20) stphpradiobuttonwithcaption.php, (21) stphpradiogroup.php, (22) stphprichbutton.php, (23) stphpspacer.php, (24) stphptable.php, (25) stphptablecell.php, (26) stphptablerow.php, (27) stphptabpanel.php, (28) stphptabtitle.php, (29) stphptextarea.php, (30) stphptextareawithcaption.php, (31) stphptoolbar.php, (32) stphpwindow.php, (33) stphpxmldoc.php, or (34) stphpxmlelement.php, a different set of vectors than CVE-2007-4737. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| speedtech stphplibrary | = 0.8.0 | No fix listed |
References
- 39073 vdb-entry
- 39074 vdb-entry
- 39075 vdb-entry
- 39076 vdb-entry
- 39077 vdb-entry
- 39078 vdb-entry
- 39079 vdb-entry
- 39080 vdb-entry
- 39081 vdb-entry
- 39082 vdb-entry
- 39083 vdb-entry
- 39084 vdb-entry
- 39085 vdb-entry
- 39086 vdb-entry
- 39087 vdb-entry
- 39088 vdb-entry
- 39089 vdb-entry
- 39090 vdb-entry
- 39091 vdb-entry
- 39092 vdb-entry
- 39093 vdb-entry
- 39094 vdb-entry
- 39095 vdb-entry
- 39096 vdb-entry
- 39097 vdb-entry
- 39098 vdb-entry
- 39099 vdb-entry
- 39100 vdb-entry
- 39101 vdb-entry
- 39102 vdb-entry
- 39103 vdb-entry
- 39104 vdb-entry
- 39105 vdb-entry
- 26658 third-party-advisory vendor-advisory
- 25525 vdb-entry
- speedtech-stphpimageshow-file-include(36417) vdb-entry