high7.5Public exploit code
CVE-2007-2167
Static code injection vulnerability in process.php in AimStats 3.2 allows remote attackers to inject PHP code into config.php via the number parameter in an up…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- AimStats 3.2 - 'process.php?update' Remote Code Execution2007-04-18 · webapps · php · Verified
Impact
Static code injection vulnerability in process.php in AimStats 3.2 allows remote attackers to inject PHP code into config.php via the number parameter in an update action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aimstats | Aimstats | Version 3.2 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/24955
- http://www.securityfocus.com/bid/23573
- http://www.vupen.com/english/advisories/2007/1447
- http://www.x-pose.org/aimstats.php
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33742
- https://www.exploit-db.com/exploits/3762
- http://secunia.com/advisories/24955
- http://www.securityfocus.com/bid/23573
- http://www.vupen.com/english/advisories/2007/1447
- http://www.x-pose.org/aimstats.php
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33742
- https://www.exploit-db.com/exploits/3762