CVE-2007-5914

Direct static code injection vulnerability in dirsys/modules/config/post.php in JBC Explorer 7.20 RC1 and earlier allows remote authenticated administrators to inject arbitrary PHP code via the DEBUG parameter, which can be executed by accessing config.inc.php. NOTE: this can be exploited by...

CVE-2007-5914

CVE-2007-5914 | Affects JBC Explorer 7.20 RC1 and earlier. Vulnerability in dirsys/modules/config/post.php allows direct static code injection if the DEBUG parameter is manipulated, enabling arbitrary PHP code execution via config.inc.php. The issue is tied to an upstream condition where an authe...