CVE-2007-5599

Multiple PHP remote file inclusion vulnerabilities in awrate 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the toroot parameter to (1) 404.php or (2) topbar.php, different vectors than CVE-2006-6368.

Score

CVSS 2.0 6.8 Medium

Status

Modified - cve@mitre.org

Published

2007-10-19

Last modified

2024-08-07

Weaknesses

CWE-94

Affected products

• Awrate (Awrate)

References

• http://arfis.wordpress.com/2007/09/13/rfi-02-awratecom-message-board/
• http://osvdb.org/45528
• http://osvdb.org/45529
• http://www.securityfocus.com/bid/26336