Immunity Canvas: NCASTER_INCLUDE

Name| ncasterinclude ---|--- CVE| CVE-2007-4320 Exploit Pack| CANVAS Description| Ncaster Remote Include Notes| CVE Name: CVE-2007-4320 VENDOR: ncastercms.com CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4320 Repeatability: Infinite CVSS: 7.5...

CVE-2007-4320

CVE-2007-4320 pertains to Ncaster 1.7.2, where a PHP remote file inclusion vulnerability exists in admin/addons/archive/archive.php. The flaw allows remote attackers to execute arbitrary PHP code by supplying a URL through the adminfolder parameter. Public references (Exploit-DB, Secunia, X-Force...