CVE Database
/

CVE-2007-2545

Back to search

CVE-2007-2545

Published: May 9, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple PHP remote file inclusion vulnerabilities in Persism CMS 0.9.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the system[path] parameter to (1) blocks/headerfile.php, (2) files/blocks/latest_files.php, (3) filters/headerfile.php, (4) forums/blocks/latest_posts.php, (5) groups/headerfile.php, (6) links/blocks/links.php, (7) menu/headerfile.php, (8) news/blocks/latest_news.php, (9) settings/headerfile.php, or (10) users/headerfile.php, in modules/.

VendorProductVersions

n/a

n/a

affected
n/a

References

37774
vdb-entry
x_refsource_OSVDB
37775
vdb-entry
x_refsource_OSVDB
37767
vdb-entry
x_refsource_OSVDB
37770
vdb-entry
x_refsource_OSVDB
37773
vdb-entry
x_refsource_OSVDB
37769
vdb-entry
x_refsource_OSVDB
37768
vdb-entry
x_refsource_OSVDB
37772
vdb-entry
x_refsource_OSVDB
3853
exploit
x_refsource_EXPLOIT-DB
37771
vdb-entry
x_refsource_OSVDB
23828
vdb-entry
x_refsource_BID
37776
vdb-entry
x_refsource_OSVDB
ADV-2007-1671
vdb-entry
x_refsource_VUPEN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now