CVE-2007-6652 cpie.php in XCMS 1.83 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct direct static code injection attacks and execute arbitrary code via th...
HighCVSS 7.5
EPSS 4.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
cpie.php in XCMS 1.83 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct direct static code injection attacks and execute arbitrary code via the testo_0 parameter in a cpie admin action to index.php, which writes to dati/generali/footer.dtb (aka the XCMS footer).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xcms | <= 1.83 | No fix listed |
References
- 40277 vdb-entry
- 28256 third-party-advisory
- xcms-cpie-code-execution(39346) vdb-entry
- 4813 exploit