Unscored CVE-2007-2078 EUVD-2007-2073GHSA-5qr3-rvcf-phq6

PHP remote file inclusion vulnerability in index.php in Maian Weblog 3.1 allows remote attackers to execute arbitrary PHP code via a URL in…

Published Apr 18, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in index.php in Maian Weblog 3.1 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter. NOTE: this issue was disputed by a third party researcher, since the path_to_folder variable is initialized before use

References

35360 vdb-entry
2582 third-party-advisory
20070414 Maian Weblog v3.1 mailing-list
20070415 Re: phpMyChat-0.14.5 mailing-list
maianweblog-pathtofolder-file-include(33708) vdb-entry
20070415 false: Maian Weblog v3.1 mailing-list