CVE-2007-5409 PHP remote file inclusion vulnerability in admin/nuseo_admin_d.php in NuSEO PHP Enterprise 1.6 (NuSEO.PHP), when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via....
MediumCVSS 6.8
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in admin/nuseo_admin_d.php in NuSEO PHP Enterprise 1.6 (NuSEO.PHP), when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the nuseo_dir parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nuhit nuseo php enterprise | = 1.6 | No fix listed |
References
- 27172 third-party-advisory
- 26021 vdb-entry
- nuseo-nuseoadmind-file-include(37062) vdb-entry
- 4512 exploit