high7.5Public exploit code
CVE-2007-2205
PHP remote file inclusion vulnerability in modules/rtmessageadd.php in LAN Management System (LMS) 1.5.3, and possibly 1.5.4, allows remote attackers to execut…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Lms 1.5.x - 'RTMessageAdd.php' Remote File Inclusion2007-04-23 · webapps · php · Verified
Impact
PHP remote file inclusion vulnerability in modules/rtmessageadd.php in LAN Management System (LMS) 1.5.3, and possibly 1.5.4, allows remote attackers to execute arbitrary PHP code via a URL in the _LIB_DIR parameter, a different vector than CVE-2007-1643.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lan Management System | Lan Management System | Versions 1.5.3, 1.5.4 |
References
- NVD record
- CVE.org record
- http://osvdb.org/35480
- http://securityreason.com/securityalert/2630
- http://www.attrition.org/pipermail/vim/2007-April/001560.html
- http://www.securityfocus.com/archive/1/466664/100/0/threaded
- http://www.securityfocus.com/bid/23611
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33819
- http://osvdb.org/35480
- http://securityreason.com/securityalert/2630
- http://www.attrition.org/pipermail/vim/2007-April/001560.html
- http://www.securityfocus.com/archive/1/466664/100/0/threaded
- http://www.securityfocus.com/bid/23611
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33819