CVE-2007-5440 in CRS Manager
Sumário (Inglês)
** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in CRS Manager allow remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter to (1) index.php or (2) login.php. NOTE: this issue is disputed by CVE, since DOCUMENT_ROOT cannot be modified by an attacker.
Reservar
14/10/2007
Divulgação
14/10/2007
Inscrições
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidade | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 39247 | CRS Manager index.php Elevação de Privilégios | 20 | Prova de conceito | Não definido | CVE-2007-5440 |