CVE Database
/

CVE-2007-3194

Back to search

CVE-2007-3194

Published: Jun 12, 2007

Modified: Jan 17, 2025

PUBLISHED

Description

Multiple PHP remote file inclusion vulnerabilities in myBloggie 2.1.5 allow remote attackers to execute arbitrary PHP code via a URL in the bloggie_root_path parameter to (1) config.php; (2) db.php, (3) template.php, (4) functions.php, and (5) classes.php in includes/; (6) viewmode.php; and (7) blog_body.php. NOTE: another researcher disputes the vulnerability because the files are protected against direct requests, contain no relevant include statements, or do not exist

VendorProductVersions

n/a

n/a

affected
n/a

References

2794
third-party-advisory
x_refsource_SREASON
20070609 myBloggie 2.1.5 Remote File Include
mailing-list
x_refsource_BUGTRAQ
37685
vdb-entry
x_refsource_OSVDB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now