CVE-2007-0983

2007-02-1611:00:00

mitre

www.cve.org

7.6 High

AI Score

Confidence

High

0.076 Low

EPSS

Percentile

94.2%

JSON

PHP remote file inclusion vulnerability in _admin/nav.php in AT Contenator 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the Root_To_Script parameter.

References

attrition.org/pipermail/vim/2007-February/001312.html

osvdb.org/33209

secunia.com/advisories/24141

www.vupen.com/english/advisories/2007/0606

exchange.xforce.ibmcloud.com/vulnerabilities/32453

www.exploit-db.com/exploits/3297