Remote file inclusion

2007-04-2717:19:00

PRIOn knowledge base

www.prio-n.com

8.2 High

AI Score

Confidence

Low

0.153 Low

EPSS

Percentile

95.9%

JSON

Multiple PHP remote file inclusion vulnerabilities in PHP-Generics 1.0 beta allow remote attackers to execute arbitrary PHP code via a URL in the _APP_RELATIVE_PATH parameter to (1) include.php, (2) dbcommon/include.php, and (3) exception/include.php.

CPENameOperatorVersion
php-genericseq1.0.0-beta

CPE	Name	Operator	Version
	php-generics	eq	1.0.0-beta

References

osvdb.org/35603

osvdb.org/35604

osvdb.org/35605

www.securityfocus.com/bid/23328

www.vupen.com/english/advisories/2007/1280

www.exploit-db.com/exploits/3669