CVE-2007-2857

2007-05-2419:00:00

mitre

www.cve.org

7.5 High

AI Score

Confidence

High

0.1 Low

EPSS

Percentile

94.9%

JSON

PHP remote file inclusion vulnerability in sample/xls2mysql in ABC Excel Parser Pro 4.0 allows remote attackers to execute arbitrary PHP code via a URL in the parser_path parameter.

References

osvdb.org/38112

securityreason.com/securityalert/2732

www.securityfocus.com/archive/1/469298/100/0/threaded

www.securityfocus.com/bid/24103

www.xmors-seurity.com/advisory/excelparser%28rfi%29.txt

exchange.xforce.ibmcloud.com/vulnerabilities/34461