critical10.0Public exploit code
CVE-2007-1391
PHP remote file inclusion vulnerability in modules/abook/foldertree.php in Leo West WEBO (aka weborganizer) 1.0 allows remote attackers to execute arbitrary PH…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WEBO (Web ORGanizer) 1.0 - 'baseDir' Remote File Inclusion2007-03-08 · webapps · php · Verified
Impact
PHP remote file inclusion vulnerability in modules/abook/foldertree.php in Leo West WEBO (aka weborganizer) 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the baseDir parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webo | Webo | Version 1.0 |
References
- NVD record
- CVE.org record
- http://advisories.echo.or.id/adv/adv67-K-159-2007.txt
- http://www.securityfocus.com/archive/1/462294/100/0/threaded
- http://www.securityfocus.com/bid/22877
- http://www.vupen.com/english/advisories/2007/0883
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32877
- https://www.exploit-db.com/exploits/3436
- http://advisories.echo.or.id/adv/adv67-K-159-2007.txt
- http://www.securityfocus.com/archive/1/462294/100/0/threaded
- http://www.securityfocus.com/bid/22877
- http://www.vupen.com/english/advisories/2007/0883
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32877
- https://www.exploit-db.com/exploits/3436