MySQL Commander dbopen.php home Parameter PHP Code Execution - Ver2 (CVE-2007-1439)

A code execution vulnerability has been reported in bitesser MySQL Commander. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2007-1439

PHP remote file inclusion vulnerability in ressourcen/dbopen.php in bitesser MySQL Commander 2.7 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the home parameter...

CVE-2007-1439

CVE-2007-1439 describes a PHP remote file inclusion vulnerability in ressourcen/dbopen.php of bitesser MySQL Commander 2.7 and earlier. When register_globals is enabled, an attacker can cause the system to execute arbitrary PHP code by supplying a crafted URL in the home parameter. This is a clie...