Unscored CVE-2007-4340 EUVD-2007-4323GHSA-mhww-7vf3-c57h

PHP remote file inclusion vulnerability in index.php in phpDVD 1.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the…

Published Aug 14, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in index.php in phpDVD 1.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the dvd_config_file parameter.

References

20070811 phpDVD v1.0.4 (dvd_config_file) Remote File Include Exploit mailing-list
phpdvd-index-file-include(35964) vdb-entry
3007 third-party-advisory