Immunity Canvas: LMS_INCLUDE

Name| lmsinclude ---|--- CVE| CVE-2007-3325 Exploit Pack| CANVAS Description| LMS Include Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: lms.org.pl CVE Url: https://vulners.com/cve/CVE-2007-3325 CVE Name: CVE-2007-3325...

CVE-2007-3325

CVE-2007-3325 describes a PHP remote file inclusion vulnerability in LMS (LAN Management System) versions 1.9.6 and earlier. The flaw resides in lib/language.php, where an attacker can cause arbitrary PHP code execution by supplying a malicious URL via the _LIB_DIR parameter (a vector distinct fr...

CVE-2007-3325

PHP remote file inclusion vulnerability in lib/language.php in LAN Management System LMS 1.9.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the LIBDIR parameter, a different vector than CVE-2007-1643 and CVE-2007-2205...