Unscored CVE-2007-1073 EUVD-2007-1070GHSA-m3m4-m2f6-fhpx

Static code injection vulnerability in install.php in mcRefer allows remote attackers to execute arbitrary PHP code via the bgcolor paramet…

Published Feb 22, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Static code injection vulnerability in install.php in mcRefer allows remote attackers to execute arbitrary PHP code via the bgcolor parameter, which is inserted into mcrconf.inc.php.

References

2283 third-party-advisory
20070211 Re: mcRefer SQL injection mailing-list
42619 vdb-entry