CVE-2007-5440 in CRS Manager
Summary
** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in CRS Manager allow remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter to (1) index.php or (2) login.php. NOTE: this issue is disputed by CVE, since DOCUMENT_ROOT cannot be modified by an attacker.
Reservation
10/14/2007
Disclosure
10/14/2007
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 39247 | CRS Manager index.php input validation | 20 | Proof-of-Concept | Not defined | CVE-2007-5440 |