high7.5Public exploit code
CVE-2007-0702
Multiple PHP remote file inclusion vulnerabilities in phpEventMan 1.0.2 allow remote attackers to execute arbitrary PHP code via a URL in the level parameter t…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- phpEventMan 1.0.2 - 'level' Remote File Inclusion2007-02-01 · webapps · php · Verified
Impact
Multiple PHP remote file inclusion vulnerabilities in phpEventMan 1.0.2 allow remote attackers to execute arbitrary PHP code via a URL in the level parameter to (1) Shared/controller/text.ctrl.php or (2) UserMan/controller/common.function.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpeventman | Phpeventman | Version 1.0.2 |
References
- NVD record
- CVE.org record
- http://osvdb.org/31936
- http://osvdb.org/31937
- http://secunia.com/advisories/24000
- http://www.attrition.org/pipermail/vim/2007-February/001264.html
- http://www.securityfocus.com/bid/22358
- http://www.vupen.com/english/advisories/2007/0460
- https://www.exploit-db.com/exploits/3246
- http://osvdb.org/31936
- http://osvdb.org/31937
- http://secunia.com/advisories/24000
- http://www.attrition.org/pipermail/vim/2007-February/001264.html
- http://www.securityfocus.com/bid/22358
- http://www.vupen.com/english/advisories/2007/0460
- https://www.exploit-db.com/exploits/3246