Unscored CVE-2007-2328 EUVD-2007-2323GHSA-mf24-5gmm-wmj9

PHP remote file inclusion vulnerability in addvip.php in phpMYTGP 1.4b allows remote attackers to execute arbitrary PHP code via a URL in t…

Published Apr 27, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in addvip.php in phpMYTGP 1.4b allows remote attackers to execute arbitrary PHP code via a URL in the msetstr[PROGSDIR] parameter.

References

2636 third-party-advisory
phpmytgp-addvip-file-include(33880) vdb-entry
20070425 phpMYTGP v v1.4b >> RFI mailing-list
34161 vdb-entry