high7.5Public exploit code
CVE-2007-2298
Multiple PHP remote file inclusion vulnerabilities in Garennes 0.6.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the repertoi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Garennes 0.6.1 - 'repertoire_config' Remote File Inclusion2007-04-13 · webapps · php · Verified
Impact
Multiple PHP remote file inclusion vulnerabilities in Garennes 0.6.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the repertoire_config parameter to index.php in (1) cpe/, (2) direction/, or (3) professeurs/.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gforge | Garennes | through 0.6.1 |
References
- NVD record
- CVE.org record
- http://osvdb.org/35771
- http://www.securityfocus.com/bid/23479
- http://www.vupen.com/english/advisories/2007/1389
- https://www.exploit-db.com/exploits/3732
- http://osvdb.org/35771
- http://www.securityfocus.com/bid/23479
- http://www.vupen.com/english/advisories/2007/1389
- https://www.exploit-db.com/exploits/3732