CVE-2007-5840 PHP remote file inclusion vulnerability in starnet/themes/c-sky/main.inc.php in Fred Stuurman SyndeoCMS 2.5.01 allows remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter,....
MediumCVSS 6.8
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in starnet/themes/c-sky/main.inc.php in Fred Stuurman SyndeoCMS 2.5.01 allows remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter, a different vector than CVE-2006-4920.2.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| syndeocms | = 2.5.1 | No fix listed |
References
- 38406 vdb-entry
- 27527 third-party-advisory
- 26321 vdb-entry
- www.syndeocms.org
- ADV-2007-3748 vdb-entry
- syndeocms-maininc-file-include(38244) vdb-entry
- 4607 exploit