high7.5Public exploit code
CVE-2007-1809
Multiple PHP remote file inclusion vulnerabilities in GraFX Company WebSite Builder (CWB) PRO 1.5 allow remote attackers to execute arbitrary PHP code via a UR…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CWB PRO 1.5 - 'INCLUDE_PATH' Remote File Inclusion2007-04-01 · webapps · php · Verified
Impact
Multiple PHP remote file inclusion vulnerabilities in GraFX Company WebSite Builder (CWB) PRO 1.5 allow remote attackers to execute arbitrary PHP code via a URL in the INCLUDE_PATH parameter to (1) cls_headline_prod.php, (2) cls_listorders.php, or (3) cls_viewpastorders.php in include/, different vectors than CVE-2007-1513.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Grafx Software | Company Website Builder | Version 1.5 |
References
- NVD record
- CVE.org record
- http://osvdb.org/35226
- http://osvdb.org/35227
- http://osvdb.org/35228
- http://www.attrition.org/pipermail/vim/2007-April/001482.html
- http://www.securityfocus.com/bid/23242
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33351
- https://www.exploit-db.com/exploits/3628
- http://osvdb.org/35226
- http://osvdb.org/35227
- http://osvdb.org/35228
- http://www.attrition.org/pipermail/vim/2007-April/001482.html
- http://www.securityfocus.com/bid/23242
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33351
- https://www.exploit-db.com/exploits/3628