QwikSec

Security Database

CVE

CWE

Training

CVE-2007-1924

Published: Apr 10, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple PHP remote file inclusion vulnerabilities in phpContact allow remote attackers to execute arbitrary PHP code via a URL in the include_path parameter to (1) contact_business.php or (2) contact_person.php. NOTE: this issue is disputed by CVE and a reliable third party, because include_path is initialized to a fixed value before use

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20070406 phpContact Multiple Remote File Inclusion Vulnerabilities

mailing-list

x_refsource_BUGTRAQ

20070406 false: phpContact Multiple Remote File Inclusion Vulnerabilities

mailing-list

x_refsource_VIM

third-party-advisory

x_refsource_SREASON

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.