CVE-2007-4978 Multiple PHP remote file inclusion vulnerabilities in phpSyncML 0.1.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the base_dir parameter to (1) Decoder.php and (2) En...
HighCVSS 7.5
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple PHP remote file inclusion vulnerabilities in phpSyncML 0.1.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the base_dir parameter to (1) Decoder.php and (2) Encoder.php in WBXML/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpsyncml | <= 0.1.2 | No fix listed |
References
- 38260 vdb-entry
- 38261 vdb-entry
- 25701 vdb-entry
- phpsyncml-basedir-file-include(36665) vdb-entry
- 4421 exploit