Arbitrary file deletion

2007-04-1023:19:00

PRIOn knowledge base

www.prio-n.com

7.9 High

AI Score

Confidence

Low

0.09 Low

EPSS

Percentile

94.7%

JSON

PHP file inclusion vulnerability in php121db.php in PHP121 Instant Messenger 2.2 allows remote attackers to execute arbitrary PHP code via a UNC share pathname or a local file pathname in the php121dir parameter, which is accessed by the file_exists function.

CPENameOperatorVersion
php121_instant_messengereq2.2

CPE	Name	Operator	Version
	php121_instant_messenger	eq	2.2

References

osvdb.org/34720

secunia.com/advisories/24818

www.securityfocus.com/bid/23392

www.vupen.com/english/advisories/2007/1314

exchange.xforce.ibmcloud.com/vulnerabilities/33525

www.exploit-db.com/exploits/3694