CVE-2007-1010

Multiple PHP remote file inclusion vulnerabilities in ZebraFeeds 1.0, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code…

published February 21, 2007

CVSS
—
EPSS
7%
Percentile
94.4
In the wild
Unconfirmed
What it is

Multiple PHP remote file inclusion vulnerabilities in ZebraFeeds 1.0, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the zf_path parameter to (1) aggregator.php and (2) controller.php in newsfeeds/includes/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07437 · 94.4th percentile
Published
2007-02-21T11:00Z
EPSS history
Timeline
  • 21 FEB 11:00Z
    Multiple PHP remote file inclusion vulnerabilities in ZebraFeeds 1.0, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code…
    cvelistv5