medium6.8Public exploit code
CVE-2007-6464
Multiple PHP remote file inclusion vulnerabilities in Form tools 1.5.0b allow remote attackers to execute arbitrary PHP code via a URL in the g_root_dir parame…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Form Tools 1.5.0b - Multiple Remote File Inclusions2007-12-14 · webapps · php · Verified
Impact
Multiple PHP remote file inclusion vulnerabilities in Form tools 1.5.0b allow remote attackers to execute arbitrary PHP code via a URL in the g_root_dir parameter to (1) admin_page_open.php and (2) client_page_open.php in global/templates/.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Form Tools | Form Tools | Version 1.5.0b |