Unscored CVE-2007-4339 EUVD-2007-4322GHSA-4868-5x3w-95q3

Multiple PHP remote file inclusion vulnerabilities in PHPCentral Poll Script 1.0 allow remote attackers to execute arbitrary PHP code via a…

Published Aug 14, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple PHP remote file inclusion vulnerabilities in PHPCentral Poll Script 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the _SERVER[DOCUMENT_ROOT] parameter in (1) poll.php and (2) pollarchive.php. NOTE: a reliable third party states that this issue is resultant from a variable extraction error in functions.php.

References

20070820 Re: PHPCentral Poll Script Remote Command Execution Vulnerability mailing-list
26434 third-party-advisory
20070812 PHPCentral Poll Script Remote Command Execution Vulnerability mailing-list
ADV-2007-2878 vdb-entry
3008 third-party-advisory
36418 vdb-entry
36419 vdb-entry