Unscored CVE-2007-2088 EUVD-2007-2083GHSA-m428-6cx3-75h6

Multiple PHP remote file inclusion vulnerabilities in Sitebar 3.3.5 and earlier allow remote attackers to execute arbitrary PHP code via a …

Published Apr 18, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple PHP remote file inclusion vulnerabilities in Sitebar 3.3.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) writerFile parameter to index.php and the (2) file parameter to Integrator.php.

References

35393 vdb-entry
sitebar-index-integrator-file-include(33688) vdb-entry
2586 third-party-advisory
20070414 Sitebar 3.3.5 (index.php writerFile)Remote File Include Vulnerabilities mailing-list
35394 vdb-entry