Immunity Canvas: DAGGER_INCLUDE

Name| daggerinclude ---|--- CVE| CVE-2007-3431 Exploit Pack| CANVAS Description| Dagger Include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: Dagger CVE Url: https://vulners.com/cve/CVE-2007-3431 CVE Name: CVE-2007-3431...

CVE-2007-3431

The CVE-2007-3431 entry describes a PHP remote file inclusion vulnerability in cal.func.php of Valerio Capello’s Dagger – The Cutting Edge (r23jan2007). The flaw arises from using a URL parameter (dir_edge_lang) to include code, allowing remote attackers to execute arbitrary PHP by supplying a cr...