Immunity Canvas: SCWIKI_INCLUDE

Name| scwikiinclude ---|--- CVE| CVE-2007-5843 Exploit Pack| CANVAS Description| scWiki remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: scWiki CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5843 CVE Name: CVE-2007-5843...

CVE-2007-5843

CVE-2007-5843 affects scWiki 1.0 Beta 2 with a PHP remote file inclusion in includes/common.php via the pathdot parameter, enabling remote code execution. Public exploit references exist (e.g., Exploit-DB), and Immunity CANVAS contains a scwiki_include module; no vendor patch details are provided...