Unscored CVE-2007-4342 EUVD-2007-4325GHSA-9p2r-6h2j-22xf

PHP remote file inclusion vulnerability in include.php in PHPCentral Login 1.0 allows remote attackers to execute arbitrary PHP code via a …

Published Aug 14, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in include.php in PHPCentral Login 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the _SERVER[DOCUMENT_ROOT] parameter. NOTE: a third party disputes this vulnerability because of the special nature of the SERVER superglobal array.

References

20070812 PHPCentral Login Script Remote Command Execution Vulnerability mailing-list
phpcentrallogin-include-file-include(35980) vdb-entry
20070814 Re: PHPCentral Login Script Remote Command Execution Vulnerability mailing-list
20070815 Re: PHPCentral Login Script Remote Command Execution Vulnerability mailing-list
38880 vdb-entry
3005 third-party-advisory