CVE-2007-5157 PHP remote file inclusion vulnerability in phfito-post.php in Alex Kocharin PHP Fidonet Tosser (PhFiTo) 1.3.0 in phpFidoNode allows remote attackers to execute arbitrary PHP code via a URL in the SRC_...
MediumCVSS 6.8
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in phfito-post.php in Alex Kocharin PHP Fidonet Tosser (PhFiTo) 1.3.0 in phpFidoNode allows remote attackers to execute arbitrary PHP code via a URL in the SRC_PATH parameter to phfito-post.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| php fidonet tosser | = 1.3.0 | No fix listed |
| phpfidonode | All versions | No fix listed |
References
- 39643 vdb-entry
- 25839 vdb-entry
- ADV-2007-3313 vdb-entry
- phpfidonode-phfitopost-file-include(36849) vdb-entry
- 4464 exploit