Immunity Canvas: XOOPS_TINYCONTENT

Name| xoopstinycontent ---|--- CVE| CVE-2007-3237 Exploit Pack| CANVAS Description| Xoops Tinycontent Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: Xoops CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3237 CVE Name: CVE-2007-3237...

CVE-2007-3237

CVE-2007-3237 and related entries describe a PHP remote file inclusion in the spaw/spaw_control.class.php handler used by XOOPS modules (TinyContent 1.5, WiwiMod 0.4, XT-Conteudo). The vulnerability allows an attacker to cause arbitrary PHP code execution by supplying a crafted URL in the spaw_ro...