CVE-2007-4815 Multiple PHP remote file inclusion vulnerabilities in WebED in Markus Iser ED Engine 0.8999 alpha allow remote attackers to execute arbitrary PHP code via a URL in the Codebase parameter to (1) channe...
MediumCVSS 6.8
EPSS 39.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple PHP remote file inclusion vulnerabilities in WebED in Markus Iser ED Engine 0.8999 alpha allow remote attackers to execute arbitrary PHP code via a URL in the Codebase parameter to (1) channeledit.php, (2) post.php, (3) view.php, or (4) viewitem.php in source/mod/rss/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| markus iser ed engine | = 0.8999_alpha | No fix listed |
References
- 38395 vdb-entry
- 38396 vdb-entry
- 38397 vdb-entry
- 38398 vdb-entry
- 20070920 WebED-0.8999 Multiple Remote File Inclusion Vulnerability mailing-list
- 25608 vdb-entry
- ADV-2007-3171 vdb-entry
- edengine-codebase-file-include(36532) vdb-entry
- 4384 exploit