critical9.3Public exploit code
CVE-2007-6082
Direct static code injection vulnerability in acp/savenews.php in Sciurus Hosting Panel, possibly 2.0.3, allows remote attackers to inject arbitrary PHP code v…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Sciurus Hosting Panel - Remote Code Injection2007-11-18 · webapps · php · Verified
Impact
Direct static code injection vulnerability in acp/savenews.php in Sciurus Hosting Panel, possibly 2.0.3, allows remote attackers to inject arbitrary PHP code via the filecontents parameter, which can be executed by accessing includes/news.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sciurus | Sciurus Hosting Panel | Version 2.0.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/3388
- http://www.r57.li/exploit.txt
- http://www.securityfocus.com/archive/1/483867/100/0/threaded
- http://www.securityfocus.com/bid/26481
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38543
- https://www.exploit-db.com/exploits/4635
- http://securityreason.com/securityalert/3388
- http://www.r57.li/exploit.txt
- http://www.securityfocus.com/archive/1/483867/100/0/threaded
- http://www.securityfocus.com/bid/26481
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38543
- https://www.exploit-db.com/exploits/4635