Unscored CVE-2007-4383 EUVD-2007-4366GHSA-85cj-5x36-chpg

PHP remote file inclusion vulnerability in tracking.php in Trackeur 1 allows remote attackers to execute arbitrary PHP code via a URL in th…

Published Aug 17, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in tracking.php in Trackeur 1 allows remote attackers to execute arbitrary PHP code via a URL in the header parameter. NOTE: CVE and a third party dispute this vulnerability because header is defined before use. The researcher is known to be unreliable

References

trackeur-tracking-file-include(36046) vdb-entry
20070814 Trackeur v.1 Remote File İnclude Bug mailing-list
20070816 Re: Trackeur v.1 Remote File İnclude Bug mailing-list