CVE-2007-5175 PHP remote file inclusion vulnerability lib/base.php in actSite 1.991 Beta allows remote attackers to execute arbitrary PHP code via a URL in the BaseCfg[BaseDir] parameter.
MediumCVSS 6.8
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability lib/base.php in actSite 1.991 Beta allows remote attackers to execute arbitrary PHP code via a URL in the BaseCfg[BaseDir] parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| actsite | = 1.991_beta | No fix listed |
References
- 25868 exploit vdb-entry
- ADV-2007-3318 vdb-entry
- actsite-base-file-include(36868) vdb-entry
- 4473 exploit