CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2007/05/30 1:30 a.m.•10 views

CVE-2007-2891

Multiple PHP remote file inclusion vulnerabilities in FirmWorX 0.1.2 allow remote attackers to execute arbitrary PHP code via a URL in the 1 bankdataroot parameter to modules/bank/includes/design/main.inc.php, or the 2 fmdataroot parameter to a includes/config/master.inc.php or b...

7.5CVSS7.6AI score0.11429EPSS

Exploits1References7

Prion•added 2007/05/30 1:30 a.m.•12 views

Remote file inclusion

7.5CVSS8.2AI score0.11429EPSS

Exploits1References7Affected Software1

CVE•added 2007/05/30 1:0 a.m.•43 views

CVE-2007-2891

CVE-2007-2891 affects FirmWorX 0.1.2 with multiple PHP remote file inclusion vulnerabilities. An attacker can cause arbitrary PHP code execution by supplying crafted URLs via (1) bank_data[root] to modules/bank/includes/design/main.inc.php or (2) fm_data[root] to (a) includes/config/master.inc.ph...

7.5CVSS7.7AI score0.11429EPSS

Exploits1References7Affected Software1