Unscored CVE-2007-4117 EUVD-2007-4101GHSA-cvxv-g5fg-rfwf

PHP remote file inclusion vulnerability in index.php in phpWebFileManager 0.5 allows remote attackers to execute arbitrary PHP code via a U…

Published Aug 1, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in index.php in phpWebFileManager 0.5 allows remote attackers to execute arbitrary PHP code via a URL in the PN_PathPrefix parameter. NOTE: this issue is disputed by a reliable third party, who demonstrates that PN_PathPrefix is defined before use

References

20070731 WTF: phpWebFileManager v0.5 (PN_PathPrefix) Remote File Include Vulnerability mailing-list
phpwebfilemanager-index-file-include(35690) vdb-entry
20070730 phpWebFileManager v0.5 (PN_PathPrefix) Remote File Include Vulnerability mailing-list
2940 third-party-advisory