medium6.8Public exploit code
CVE-2007-4101
Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote attackers to execute arbitrary PHP code via the Madoa parameter to (1) index.…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Global Centre Aplomb Poll 1.1 - 'admin.php?Madoa' Remote File Inclusion2007-07-30 · webapps · php · Verified
- Global Centre Aplomb Poll 1.1 - 'vote.php?Madoa' Remote File Inclusion2007-07-30 · webapps · php · Verified
- Global Centre Aplomb Poll 1.1 - 'index.php?Madoa' Remote File Inclusion2007-07-30 · webapps · php · Verified
Impact
Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote attackers to execute arbitrary PHP code via the Madoa parameter to (1) index.php, (2) vote.php, and (3) admin.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Global Centre | Aplomb Poll | Version 1.1 |
References
- NVD record
- CVE.org record
- http://osvdb.org/37262
- http://osvdb.org/37263
- http://osvdb.org/37264
- http://securityreason.com/securityalert/2937
- http://www.attrition.org/pipermail/vim/2007-July/001739.html
- http://www.securityfocus.com/archive/1/475096/100/0/threaded
- http://www.securityfocus.com/bid/25138
- http://osvdb.org/37262
- http://osvdb.org/37263
- http://osvdb.org/37264
- http://securityreason.com/securityalert/2937
- http://www.attrition.org/pipermail/vim/2007-July/001739.html
- http://www.securityfocus.com/archive/1/475096/100/0/threaded
- http://www.securityfocus.com/bid/25138