EUVD-2007-2082

Malware in sbrugna...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in CNStats 2.12, when registerglobals is enabled and .htaccess is not recognized, allow remote attackers to execute arbitrary PHP code via a URL in the bn parameter to 1 whor.php or 2 whos.php in reports/. NOTE: the provenance of this information...

CVE-2007-2087

Multiple PHP remote file inclusion vulnerabilities in CNStats 2.12, when registerglobals is enabled and .htaccess is not recognized, allow remote attackers to execute arbitrary PHP code via a URL in the bn parameter to 1 whor.php or 2 whos.php in reports/. NOTE: the provenance of this information...

CVE-2007-2087

Multiple PHP remote file inclusion vulnerabilities in CNStats 2.12, when registerglobals is enabled and .htaccess is not recognized, allow remote attackers to execute arbitrary PHP code via a URL in the bn parameter to 1 whor.php or 2 whos.php in reports/. NOTE: the provenance of this information...

CVE-2007-2087

CNStats 2.12 contains multiple PHP remote file inclusion vulnerabilities that let an attacker execute arbitrary PHP code via a URL in the bn parameter to reports/who_r.php or reports/who_s.php when register_globals is enabled and .htaccess is not recognized. CVSS v2 base score 6.8 (Medium) with N...