high7.5Public exploit code
CVE-2007-6652
cpie.php in XCMS 1.83 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct direct static code injection …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- XCMS 1.83 - Remote Command Execution2007-12-30 · webapps · php · Verified
Impact
cpie.php in XCMS 1.83 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct direct static code injection attacks and execute arbitrary code via the testo_0 parameter in a cpie admin action to index.php, which writes to dati/generali/footer.dtb (aka the XCMS footer).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xcms | Xcms | through 1.83 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/40277
- http://secunia.com/advisories/28256
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39346
- https://www.exploit-db.com/exploits/4813
- http://osvdb.org/40277
- http://secunia.com/advisories/28256
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39346
- https://www.exploit-db.com/exploits/4813