CVE-2007-5440 in CRS Manager
Résumé (Anglaise)
** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in CRS Manager allow remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter to (1) index.php or (2) login.php. NOTE: this issue is disputed by CVE, since DOCUMENT_ROOT cannot be modified by an attacker.
Réserver
14/10/2007
Divulgation
14/10/2007
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 39247 | CRS Manager index.php élévation de privilèges | 20 | Preuve de concept | Non défini | CVE-2007-5440 |