CVE-2007-0298 in LunarPoll

Summary

PHP remote file inclusion vulnerability in show.php in LunarPoll, when register_globals is enabled, allows remote attackers execute arbitrary PHP code via a URL in the PollDir parameter.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

01/16/2007

Disclosure

01/17/2007

Moderation

VulDB entry created

Entries

1

CPE

ready

CWE

CWE-73 (Confirmed)

Exploit

Download

CVSS

7.3

EPSS

0.14519

CTI

Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-0298
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-0298
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-0298/