| Reporter | Title | Published | Views | Family All 6 |
|---|---|---|---|---|
 | CVE-2007-2988 | 1 Jun 200710:00 | – | cvelist |
 | Inout Search Engine - Remote Code Execution | 29 May 200700:00 | – | exploitdb |
 | EUVD-2007-2980 | 7 Oct 202500:30 | – | euvd |
 | CVE-2007-2988 | 1 Jun 200710:30 | – | nvd |
 | Design/Logic Flaw | 1 Jun 200710:30 | – | prion |
 | CVE-2007-2988: Undefined Security Weakness | 1 Jun 200700:00 | – | rapid7 |
| Source | Link |
|---|---|
| securityfocus | www.securityfocus.com/bid/24199 |
| exploit-db | www.exploit-db.com/exploits/4004 |
| securityreason | www.securityreason.com/securityalert/2763 |
| exchange | www.exchange.xforce.ibmcloud.com/vulnerabilities/34563 |
| securityfocus | www.securityfocus.com/archive/1/469808/100/0/threaded |
| securityfocus | www.securityfocus.com/bid/24189 |
| osvdb | www.osvdb.org/42034 |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| term | request body | admin/create_engine.php | The application fails to terminate execution after a header redirect, allowing an attacker to inject arbitrary PHP code via the 'term' parameter in the request body. | CWE-94: Improper Control of Execution Flow: External Control of Command Arguments (RP), CWE-91: Arbitrary Code Execution |
| shell | request body | index.php | The application allows the creation of a web shell by processing a base64 encoded PHP payload via the 'shell' parameter in the request body. | CWE-91: Arbitrary Code Execution |
| cmd | query param | piggy_marty.php | A web shell created via the previous steps can be used to execute arbitrary system commands via the 'cmd' query parameter. | CWE-78: OS Command Injection |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
16 Jun 2026 22:40Current
6.8Medium risk
Vulners AI Score6.8
CVSS 27.5
EPSS0.07699