CVE-2007-1525

2007-03-2020:00:00

mitre

www.cve.org

7.7 High

AI Score

Confidence

Low

0.145 Low

EPSS

Percentile

95.8%

JSON

Direct static code injection vulnerability in postpost.php in Dayfox Blog (dfblog) 4 allows remote attackers to execute arbitrary PHP code via the cat parameter, which can be executed via a request to posts.php.

References

infusion.110mb.com/enter/dfblog4.zip

osvdb.org/34073

secunia.com/advisories/24534

www.securityfocus.com/bid/22972

www.vupen.com/english/advisories/2007/0969

www.exploit-db.com/exploits/3478