Back to search
CVE-2007-0863
Published: Feb 9, 2007
Modified: Aug 7, 2024
PUBLISHED
Description
PHP remote file inclusion vulnerability in Trevorchan 0.7 and earlier allows remote attackers to execute arbitrary code via the tc_config[rootdir] parameter to (1) upgrade.php, (2) paint_save.php, (3) menu.php, (4) manage.php, and (5) banned.php. NOTE: his issue has been disputed by reliable third parties, who state that the variable is set before use in config.php
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
33475
vdb-entry
x_refsource_OSVDB
1017512
vdb-entry
x_refsource_SECTRACK
20070115 [Bogus] [ilkerkandemir at mynet.com: Trevorchan <= v0.7 Remote File Include Vulnerability] (fwd)
mailing-list
x_refsource_VIM
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now