Unscored CVE-2007-3084 EUVD-2007-3076GHSA-g3vg-q854-qppq

PHP remote file inclusion vulnerability in sampleblogger.php in Comdev Web Blogger 4.1 allows remote attackers to execute arbitrary PHP cod…

Published Jun 6, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in sampleblogger.php in Comdev Web Blogger 4.1 allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter, a different vector than CVE-2006-5441.

References

38361 vdb-entry
20070603 Comdev Web Blogger 4.1 RFI Vulnerability mailing-list
comdev-sampleblogger-file-include(34683) vdb-entry