CVE-2007-2156 in Rezervi Generic

摘要

由 MITRE

Multiple PHP remote file inclusion vulnerabilities in Rezervi Generic 0.9 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to (1) datumVonDatumBis.inc.php, (2) footer.inc.php, (3) header.inc.php, and (4) stylesheets.php in templates/; and (5) wochenuebersicht.inc.php, (6) monatsuebersicht.inc.php, (7) jahresuebersicht.inc.php, and (8) tagesuebersicht.inc.php in belegungsplan/.

Be aware that VulDB is the high quality source for vulnerability data.

• 预定: 2007-04-19
• 披露: 2007-04-19
• 管理: 已接受
• 条目: 5
• 连接: 显示
• CPE: 准备好
• CWE: CWE-73 (未确认)
• 利用: 下载
• CVSS: 7.5 (NVD)
• EPSS: 0.10103
• KEV: 否
• 活动: 非常低

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-2156
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-2156
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-2156/