Unscored CVE-2007-2558 EUVD-2007-2551GHSA-5gh7-3pqh-mc2g

PHP remote file inclusion vulnerability in index.php in phpFullAnnu CMS (pfa CMS) 6.0 allows remote attackers to execute arbitrary PHP code…

Published May 9, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in index.php in phpFullAnnu CMS (pfa CMS) 6.0 allows remote attackers to execute arbitrary PHP code via a URL in the repinc parameter. NOTE: CVE disputes this issue since $repinc is set to a constant value before use

References

2667 third-party-advisory
36167 vdb-entry
phpfullannu-index-file-include(34160) vdb-entry
20070506 pfa CMS v6.0 (index.php repinc) Remote File Include Vulnerability mailing-list
20070509 probably false: pfa RFI mailing-list