CVE-2007-0831

Multiple PHP remote file inclusion vulnerabilities in Atsphp 5.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the CONFpath parameter to 1 index.php, 2 sources/usercp.php, or 3 sources/admin.php. NOTE: Another researcher has disputed this vulnerability, noting that CONFpath ...

CVE-2007-0831

Atsphp 5.0.1 is affected by multiple PHP remote file inclusion vulnerabilities via the CONF[path] parameter in API endpoints (index.php, sources/usercp.php, sources/admin.php). The root cause is improper handling of CONF[path], enabling arbitrary PHP code execution. Note that a researcher dispute...

CVE-2007-0831: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Atsphp 5.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the CONFpath parameter to 1 index.php, 2 sources/usercp.php, or 3 sources/admin.php. NOTE: Another researcher has disputed this vulnerability, noting that CONFpath ...

PT-2007-2274 · Atsphp · Atsphp

Name of the Vulnerable Software and Affected Versions: Atsphp version 5.0.1 Description: Multiple PHP remote file inclusion issues allow remote attackers to execute arbitrary PHP code via a URL in the CONFpath parameter to API endpoints such as "index.php", "sources/usercp.php", or...