CVE-2007-6289 (SERWeb) |
|
| BugsAlert Home > CVE-2007-6289 (SERWeb) | |
|
Multiple PHP remote file inclusion vulnerabilities in SerWeb 2.0.0 dev1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) _SERWEB[configdir] parameter to load_lang.php, (2) _SERWEB[functionsdir] parameter to main_prepend.php, and the (3) _PHPLIB[libdir] parameter to load_phplib.php, different vectors than CVE-2007-3359 and CVE-2007-3358. Original Source: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-6289 Learn more about CVE-2007-6289 (SERWeb) |
|
| Tags: cve-2007-6289 serweb | |
Related Items |
|
|
Sciurus Hosting Panel Code Injection
|
|
|
Dave Townsend: Mossop Status Update: 2010-04-02
|
|
|
Karmetasploit
|
|
|
Sun Java System Application Server Information Disclosure
|
|
|
Vuln: Linux Kernel 'fasync_helper()' Local Privilege Escalation Vulnerability
|
|
|
WEBAlbum <= 2.0 Remote Stored Cross Site Scripting Vulnerability
|
|
|
Frederic Wenzel: Firefox 3.5 Released
|
|
