high7.5Public exploit code
CVE-2007-0704
PHP remote file inclusion vulnerability in install.php in Somery 0.4.6 allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Somery 0.4.6 - 'skin_dir' Remote File Inclusion2006-09-08 · webapps · php · Verified
Impact
PHP remote file inclusion vulnerability in install.php in Somery 0.4.6 allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter, a different vector than CVE-2006-4669. NOTE: the documentation says to remove install.php after installation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Somery | Somery | Version 0.4.6 |