critical9.3Public exploit code
CVE-2007-4007
PHP remote file inclusion vulnerability in index.php in Article Directory (Article Site Directory) allows remote attackers to execute arbitrary PHP code via a …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Article Directory - 'index.php' Remote File Inclusion2007-07-24 · webapps · php · Verified
Impact
PHP remote file inclusion vulnerability in index.php in Article Directory (Article Site Directory) allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Article Directory | Article Directory | All versions |
References
- NVD record
- CVE.org record
- http://darkcode.ath.cx/f0rum/ind3x.php?action=vthread&forum=12&topic=114
- http://osvdb.org/39107
- http://www.securityfocus.com/bid/25042
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35632
- https://www.exploit-db.com/exploits/4221
- http://darkcode.ath.cx/f0rum/ind3x.php?action=vthread&forum=12&topic=114
- http://osvdb.org/39107
- http://www.securityfocus.com/bid/25042
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35632
- https://www.exploit-db.com/exploits/4221