Unscored CVE-2007-2254 EUVD-2007-2249GHSA-4p2p-6cv5-fxv8

PHP remote file inclusion vulnerability in admin/setup/level2.php in PHP Classifieds 6.04, and probably earlier versions, allows remote att…

Published Apr 25, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in admin/setup/level2.php in PHP Classifieds 6.04, and probably earlier versions, allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. NOTE: this product was referred to as "Allfaclassfieds" in the original disclosure.

References

20070422 Allfaclassfieds (level2.php dir) remote file inclusion mailing-list
allfaclassfieds-level2-file-include(33798) vdb-entry
20070425 [false but true] "Allfaclassfieds" RFI no; PHP Classifieds yes mailing-list
2618 third-party-advisory