Unscored CVE-2007-1957 EUVD-2007-1951GHSA-fp8w-w34p-4fmv

Multiple PHP remote file inclusion vulnerabilities in Guernion Sylvain Portail Web Php (aka Gsylvain35 Portail Web, PwP) allow remote attac…

Published Apr 11, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple PHP remote file inclusion vulnerabilities in Guernion Sylvain Portail Web Php (aka Gsylvain35 Portail Web, PwP) allow remote attackers to execute arbitrary PHP code via a URL in the pageAll parameter to index.php in (1) template/Vert/, or (2) template/Noir/.

References

35290 vdb-entry
2543 third-party-advisory
20070408 Gsylvain35 Portail Web Remote File Include Vulnerabilities mailing-list