Immunity Canvas: WEBED_INCLUDE

Name| webedinclude ---|--- CVE| CVE-2007-4815 Exploit Pack| CANVAS Description| WebEd Remote file inclusion Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: ed-engine CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4815 CVE Name: CVE-2007-4815...

CVE-2007-4815

CVE-2007-4815 affects the WebED ED Engine 0.8999 alpha. The vulnerability is a set of multiple remote PHP file inclusion flaws that allow an attacker to execute arbitrary PHP code by supplying a crafted URL via the Codebase parameter to one of the following scripts: channeledit.php, post.php, vie...