Immunity Canvas: AWZMB_INCLUDE

Name| awzmbinclude ---|--- CVE| CVE-2007-5592 Exploit Pack| CANVAS Description| awzMB remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: awzMB CVE Url: https://vulners.com/cve/CVE-2007-5592 CVE Name: CVE-2007-5592...

CVE-2007-5592

CVE-2007-5592 describes multiple PHP remote file inclusion vulnerabilities in awzMB 4.2 beta 1 and earlier. An attacker can supply a URL in the Setting[OPT_includepath] parameter to load remote PHP code via the following files in modules/: adminhelp.php; admin.incl.php; reg.incl.php; help.incl.ph...