ID CVE-2007-1708Type cveReporter NVDModified 2017-10-10T21:31:57
Description
PHP remote file inclusion vulnerability in lib/db/ez_sql.php in ttCMS 4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the lib_path parameter.
{"id": "CVE-2007-1708", "bulletinFamily": "NVD", "title": "CVE-2007-1708", "description": "PHP remote file inclusion vulnerability in lib/db/ez_sql.php in ttCMS 4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the lib_path parameter.", "published": "2007-03-26T21:19:00", "modified": "2017-10-10T21:31:57", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-1708", "reporter": "NVD", "references": ["https://exchange.xforce.ibmcloud.com/vulnerabilities/33202", "http://www.vupen.com/english/advisories/2007/1102", "https://www.exploit-db.com/exploits/3563", "http://www.securityfocus.com/bid/23139"], "cvelist": ["CVE-2007-1708"], "type": "cve", "lastseen": "2017-10-11T11:07:04", "history": [{"bulletin": {"assessment": {"href": "", "name": "", "system": ""}, "bulletinFamily": "NVD", "cpe": ["cpe:/a:ttcms:ttforum:3", "cpe:/a:ttcms:ttforum:1", "cpe:/a:ttcms:ttforum:4", "cpe:/a:ttcms:ttforum:2"], "cvelist": ["CVE-2007-1708"], "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "description": "PHP remote file inclusion vulnerability in lib/db/ez_sql.php in ttCMS 4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the lib_path parameter.", "edition": 2, "enchantments": {}, "hash": "fbee7ed44eb0d4117fd7cd55a782395b3bf77d0b3a9a2ef1351d4255b51fb15e", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "da6cc0a3128ed324d7f20ac6131d2ef9", "key": "references"}, {"hash": "6af6473262bb24471db0a771f29ec510", "key": "published"}, {"hash": "5c09b67df32f0c678ad4823c86aebb66", "key": "cvelist"}, {"hash": "4abae29af5e783b78908a2ec5eb4d32c", "key": "title"}, {"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "e5d275b3ebd62646b78320753699e02e", "key": "cvss"}, {"hash": "b7ef5c9c7e6fe17940be80151e71085c", "key": "modified"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "d56f42cc52b9bdb2f1c83dd44da04add", "key": "cpe"}, {"hash": "4199a3ac3b1c362f6a0897b8ab873d4d", "key": "href"}, {"hash": "ae565372be436b15ab780139c368cf17", "key": "description"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-1708", "id": "CVE-2007-1708", "lastseen": "2017-07-29T11:21:56", "modified": "2017-07-28T21:30:56", "objectVersion": "1.3", "published": "2007-03-26T21:19:00", "references": ["https://exchange.xforce.ibmcloud.com/vulnerabilities/33202", "http://www.vupen.com/english/advisories/2007/1102", "http://www.securityfocus.com/bid/23139", "http://www.milw0rm.com/exploits/3563"], "reporter": "NVD", "scanner": [], "title": "CVE-2007-1708", "type": "cve", "viewCount": 1}, "differentElements": ["references", "modified"], "edition": 2, "lastseen": "2017-07-29T11:21:56"}, {"bulletin": {"assessment": {"href": "", "name": "", "system": ""}, "bulletinFamily": "NVD", "cpe": ["cpe:/a:ttcms:ttforum:3", "cpe:/a:ttcms:ttforum:1", "cpe:/a:ttcms:ttforum:4", "cpe:/a:ttcms:ttforum:2"], "cvelist": ["CVE-2007-1708"], "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "description": "PHP remote file inclusion vulnerability in lib/db/ez_sql.php in ttCMS 4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the lib_path parameter.", "edition": 1, "enchantments": {}, "hash": "9e466add912171d132a97beb76cbd0cfdf86638800a3a393c8eb780b75b779c2", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "6af6473262bb24471db0a771f29ec510", "key": "published"}, {"hash": "5c09b67df32f0c678ad4823c86aebb66", "key": "cvelist"}, {"hash": "4abae29af5e783b78908a2ec5eb4d32c", "key": "title"}, {"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "e5d275b3ebd62646b78320753699e02e", "key": "cvss"}, {"hash": "6c31b64ba23a1d62110fc7735b41bbd7", "key": "modified"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "3ad495a1934146bcebf570177d4f4d6a", "key": "references"}, {"hash": "d56f42cc52b9bdb2f1c83dd44da04add", "key": "cpe"}, {"hash": "4199a3ac3b1c362f6a0897b8ab873d4d", "key": "href"}, {"hash": "ae565372be436b15ab780139c368cf17", "key": "description"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-1708", "id": "CVE-2007-1708", "lastseen": "2016-09-03T08:38:55", "modified": "2011-03-07T21:52:42", "objectVersion": "1.2", "published": "2007-03-26T21:19:00", "references": ["http://www.vupen.com/english/advisories/2007/1102", "http://xforce.iss.net/xforce/xfdb/33202", "http://www.securityfocus.com/bid/23139", "http://www.milw0rm.com/exploits/3563"], "reporter": "NVD", "scanner": [], "title": "CVE-2007-1708", "type": "cve", "viewCount": 1}, "differentElements": ["references", "modified"], "edition": 1, "lastseen": "2016-09-03T08:38:55"}], "edition": 3, "hashmap": [{"key": "assessment", "hash": "6d3f4796275bb54c21a33b82f399cc6d"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "d56f42cc52b9bdb2f1c83dd44da04add"}, {"key": "cvelist", "hash": "5c09b67df32f0c678ad4823c86aebb66"}, {"key": "cvss", "hash": "e5d275b3ebd62646b78320753699e02e"}, {"key": "description", "hash": "ae565372be436b15ab780139c368cf17"}, {"key": "href", "hash": "4199a3ac3b1c362f6a0897b8ab873d4d"}, {"key": "modified", "hash": "cad6736a1798657f31bf5e709ee84aa7"}, {"key": "published", "hash": "6af6473262bb24471db0a771f29ec510"}, {"key": "references", "hash": "c23e37ccb6458fd98a965c31aa378933"}, {"key": "reporter", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "scanner", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "title", "hash": "4abae29af5e783b78908a2ec5eb4d32c"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "d3f5339954931a12edf8f0fecbe53209a746db04446751f10a1cda4f5396363d", "viewCount": 1, "enchantments": {"score": {"value": 7.5, "vector": "NONE", "modified": "2017-10-11T11:07:04"}, "vulnersScore": 7.5}, "objectVersion": "1.3", "cpe": ["cpe:/a:ttcms:ttforum:3", "cpe:/a:ttcms:ttforum:1", "cpe:/a:ttcms:ttforum:4", "cpe:/a:ttcms:ttforum:2"], "assessment": {"href": "", "name": "", "system": ""}, "scanner": []}
{"osvdb": [{"lastseen": "2017-04-28T13:20:33", "references": [], "description": "## Manual Testing Notes\nhttp://[target]/ttCMS_path/lib/db/ez_sql.php?lib_path=[evil_code]\n## References:\nISS X-Force ID: 33202\nGeneric Exploit URL: http://www.milw0rm.com/exploits/3563\nFrSIRT Advisory: ADV-2007-1102\n[CVE-2007-1708](https://vulners.com/cve/CVE-2007-1708)\nBugtraq ID: 23139\n", "edition": 1, "reporter": "OSVDB", "published": "2007-03-24T00:00:00", "title": "ttCMS lib/db/ez_sql.php lib_path Variable Remote File Inclusion", "type": "osvdb", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "bulletinFamily": "software", "affectedSoftware": [], "cvelist": ["CVE-2007-1708"], "modified": "2007-03-24T00:00:00", "href": "https://vulners.com/osvdb/OSVDB:37198", "id": "OSVDB:37198", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}], "exploitdb": [{"lastseen": "2016-01-31T18:47:20", "osvdbidlist": ["37198"], "_object_types": ["robots.models.exploitdb.ExploitDbBulletin", "robots.models.base.Bulletin"], "references": [], "description": "ttCMS. CVE-2007-1708. Webapps exploit for php platform", "reporter": "Kacper", "published": "2007-03-24T00:00:00", "type": "exploitdb", "title": "ttCMS <= 4 - ez_sql.php lib_path Remote File Inclusion Vulnerability", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "bulletinFamily": "exploit", "cvelist": ["CVE-2007-1708"], "_object_type": "robots.models.exploitdb.ExploitDbBulletin", "modified": "2007-03-24T00:00:00", "id": "EDB-ID:3563", "href": "https://www.exploit-db.com/exploits/3563/", "sourceData": "DEVIL TEAM - HACKING POLISH TEAM\r\n\r\nAuthor: Kacper (a.k.a Rahim)\r\nContact: kacper1964@yahoo.pl\r\nHomepage: http://www.rahim.webd.pl/\r\nIrc: irc.milw0rm.com:6667 #devilteam \r\n--------------------------------------------\r\nPozdro dla wszystkich z kanalu IRC oraz forum DEVIL TEAM.\r\n\r\n\r\n\r\nttCMS <= v4 (ez_sql.php lib_path) RFI Vulnerability\r\nscript download/homepage: http://www.ttcms.com/v4/\r\n\r\n\r\n--------------------------------------------\r\nVulnerabilities:\r\n\r\nhttp://site.com/ttCMS_path/lib/db/ez_sql.php?lib_path=[evil_code]\r\n\r\n# milw0rm.com [2007-03-24]\r\n", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "sourceHref": "https://www.exploit-db.com/download/3563/"}], "securityvulns": [{"lastseen": "2018-08-31T11:09:24", "references": ["https://vulners.com/securityvulns/securityvulns:doc:16464", "https://vulners.com/securityvulns/securityvulns:doc:16469", "https://vulners.com/securityvulns/securityvulns:doc:16473", "https://vulners.com/securityvulns/securityvulns:doc:16455", "https://vulners.com/securityvulns/securityvulns:doc:16461", "https://vulners.com/securityvulns/securityvulns:doc:16476", "https://vulners.com/securityvulns/securityvulns:doc:16474", "https://vulners.com/securityvulns/securityvulns:doc:16463", "https://vulners.com/securityvulns/securityvulns:doc:16470", "https://vulners.com/securityvulns/securityvulns:doc:16472", "https://vulners.com/securityvulns/securityvulns:doc:16458", "https://vulners.com/securityvulns/securityvulns:doc:16459", "https://vulners.com/securityvulns/securityvulns:doc:16457", "https://vulners.com/securityvulns/securityvulns:doc:16477", "https://vulners.com/securityvulns/securityvulns:doc:16466", "https://vulners.com/securityvulns/securityvulns:doc:16454", "https://vulners.com/securityvulns/securityvulns:doc:16478", "https://vulners.com/securityvulns/securityvulns:doc:16465", "https://vulners.com/securityvulns/securityvulns:doc:16468", "https://vulners.com/securityvulns/securityvulns:doc:16471", "https://vulners.com/securityvulns/securityvulns:doc:16460", "https://vulners.com/securityvulns/securityvulns:doc:16462", "https://vulners.com/securityvulns/securityvulns:doc:16475", "https://vulners.com/securityvulns/securityvulns:doc:16467"], "description": "PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.", "edition": 1, "reporter": " ", "published": "2007-03-25T00:00:00", "title": "Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)", "type": "securityvulns", "enchantments": {"score": {"modified": "2018-08-31T11:09:24", "vector": "NONE", "value": 4.3}}, "bulletinFamily": "software", "affectedSoftware": [{"name": "Active BuyandSell", "version": "6.2", "operator": "eq"}, {"name": "LMS", "version": "1.8", "operator": "eq"}, {"name": "ClassWeb", "version": "2.03", "operator": "eq"}, {"name": "Active Trade", "version": "2", "operator": "eq"}, {"name": "Moodle", "version": "1.5", "operator": "eq"}, {"name": "PBlang", "version": "4.66", "operator": "eq"}, {"name": "MetaForum", "version": "0.513", "operator": "eq"}, {"name": "php-revista", "version": "1.1", "operator": "eq"}, {"name": "File Upload System", "version": "1.0", "operator": "eq"}, {"name": "pragmaMX Landkartenmodule", "version": "2.1", "operator": "eq"}, {"name": "Katalog Plyt Audio", "version": "1.0", "operator": "eq"}, {"name": "Monster Top List", "version": "1.4", "operator": "eq"}, {"name": "ScriptMagix Lyrics", "version": "2.0", "operator": "eq"}, {"name": "ScriptMagix Jokes", "version": "2.0", "operator": "eq"}, {"name": "Free Image Hosting", "version": "2.0", "operator": "eq"}, {"name": "StatsDawg", "version": "0.92", "operator": "eq"}, {"name": "realGuestbook", "version": "5.01", "operator": "eq"}, {"name": "ScriptMagix Photo Rating", "version": "2.0", "operator": "eq"}, {"name": "Portail PHP", "version": "2.0", "operator": "eq"}, {"name": "Philex", "version": "0.2", "operator": "eq"}, {"name": "GeBlog", "version": "0.1", "operator": "eq"}, {"name": "Active Newsletter", "version": "4.3", "operator": "eq"}, {"name": "ScriptMagix FAQ Builder", "version": "2.0", "operator": "eq"}, {"name": "aspWebCalendar", "version": "4.5", "operator": "eq"}, {"name": "RoseOnlineCMS", "version": "3", "operator": "eq"}, {"name": "eWebquiz", "version": "8", "operator": "eq"}, {"name": "phpBB", "version": "2.0", "operator": "eq"}, {"name": "zope", "version": "2.10", "operator": "eq"}, {"name": "Active PHP Bookmark Notes", "version": "0.2", "operator": "eq"}, {"name": "Guestbara", "version": "1.2", "operator": "eq"}, {"name": "TYPOlight webCMS", "version": "2.2", "operator": "eq"}, {"name": "WordPress", "version": "2.0", "operator": "eq"}, {"name": "ScriptMagix Recipes", "version": "2.0", "operator": "eq"}, {"name": "Digital Eye Gallery", "version": "1.1", "operator": "eq"}, {"name": "ttCMS", "version": "4", "operator": "eq"}, {"name": "Net Portal Dynamic System", "version": "5.10", "operator": "eq"}], "cvelist": ["CVE-2007-1624", "CVE-2007-1607", "CVE-2007-1600", "CVE-2007-1587", "CVE-2007-1632", "CVE-2007-1617", "CVE-2007-1627", "CVE-2007-1707", "CVE-2007-1695", "CVE-2007-1616", "CVE-2007-1643", "CVE-2007-1634", "CVE-2007-1566", "CVE-2007-1615", "CVE-2007-1524", "CVE-2007-1625", "CVE-2007-1640", "CVE-2007-1651", "CVE-2007-1553", "CVE-2007-1623", "CVE-2007-1708", "CVE-2007-1715", "CVE-2007-1699", "CVE-2007-1704", "CVE-2007-1647", "CVE-2007-1612", "CVE-2007-1577", "CVE-2007-1703", "CVE-2007-1596", "CVE-2007-1633", "CVE-2007-1552", "CVE-2007-1555", "CVE-2007-1605", "CVE-2007-1606", "CVE-2007-1705", "CVE-2007-1637", "CVE-2007-1539", "CVE-2007-1712", "CVE-2007-0240", "CVE-2007-1656", "CVE-2007-1635", "CVE-2007-1652", "CVE-2007-1619", "CVE-2007-1630", "CVE-2007-1696", "CVE-2007-1629", "CVE-2007-1641", "CVE-2007-1702", "CVE-2007-1626", "CVE-2007-1604", "CVE-2007-1554", "CVE-2007-1698", "CVE-2007-1697", "CVE-2007-1706", "CVE-2007-1622", "CVE-2007-1618", "CVE-2007-1621", "CVE-2007-1636"], "modified": "2007-03-25T00:00:00", "id": "SECURITYVULNS:VULN:7465", "href": "https://vulners.com/securityvulns/SECURITYVULNS:VULN:7465", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}]}
