QwikSec

Security Database

CVE

CWE

Training

CVE-2007-2084

Published: Apr 18, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

PHP remote file inclusion vulnerability in MobilePublisherphp 1.1.2 allows remote attackers to execute arbitrary PHP code via a URL in the auth_method parameter to (1) index.php, (2) list.php, (3) postreview.php, (4) reindex.php, (5) sections.php, (6) templates.php, (7) userinfo.php, (8) users.php, and (9) view.php in admin/. NOTE: this issue has been disputed by a reliable third party, who states that $auth_method is defined before use

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20070414 MobilePublisherphp v1.1.2 Remote File Include Vulnerabilities

mailing-list

x_refsource_BUGTRAQ

mobilepublisher-authmethod-file-include(33679)

vdb-entry

x_refsource_XF

vdb-entry

x_refsource_OSVDB

20070414 true until installed: MobilePublisherphp v1.1.2 Remote File Include Vulnerabilities

mailing-list

x_refsource_VIM

third-party-advisory

x_refsource_SREASON

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.