CVE-2007-5185 Multiple PHP remote file inclusion vulnerabilities in phpWCMS XT 0.0.7 BETA and earlier allow remote attackers to execute arbitrary PHP code via a URL in the HTML_MENU_DirPath parameter to (1) config_...
MediumCVSS 6.8
EPSS 42.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple PHP remote file inclusion vulnerabilities in phpWCMS XT 0.0.7 BETA and earlier allow remote attackers to execute arbitrary PHP code via a URL in the HTML_MENU_DirPath parameter to (1) config_HTML_MENU.php and (2) config_PHPLM.php in phpwcms_template/inc_script/frontend_render/navigation/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpwcms-xt | <= 0.0.7_beta | No fix listed |
References
- 38591 vdb-entry
- 38592 vdb-entry
- 25879 vdb-entry
- ADV-2007-3332 vdb-entry
- phpwcmsxt-htmlmenudirpath-file-include(36905) vdb-entry
- 4477 exploit