Unscored CVE-2007-2411 EUVD-2007-2406GHSA-9wh8-g23m-xwfh

PHP remote file inclusion vulnerability in index.php in Sphider 1.2.x allows remote attackers to execute arbitrary PHP code via a URL in th…

Published May 1, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in index.php in Sphider 1.2.x allows remote attackers to execute arbitrary PHP code via a URL in the include_dir parameter. NOTE: a third party disputes this vulnerability, stating that "the application is not vulnerable to this issue.

References

2648 third-party-advisory
20070428 Sphider Version 1.2.x (include_dir) file include mailing-list
23699 vdb-entry
sphider-index-file-include(33963) vdb-entry
34174 vdb-entry
20070430 Re: Sphider Version 1.2.x (include_dir) file include mailing-list