CVE-2007-1852

Multiple PHP remote file inclusion vulnerabilities in 2BGal 3.1.1 allow remote attackers to execute arbitrary PHP code via a URL in the lang_filename parameter…

published April 3, 2007

CVSS
—
EPSS
1%
Percentile
71.0
In the wild
Unconfirmed
What it is

Multiple PHP remote file inclusion vulnerabilities in 2BGal 3.1.1 allow remote attackers to execute arbitrary PHP code via a URL in the lang_filename parameter to (1) index.php or (2) backupdb.inc.php in admin/, or other unspecified files, different vectors than CVE-2006-5505. NOTE: this issue has been disputed by CVE, since the lang_filename variable is defined before it is used

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01343 · 71.0th percentile
Published
2007-04-03T16:00Z
EPSS history
Timeline
  • 03 APR 16:00Z
    Multiple PHP remote file inclusion vulnerabilities in 2BGal 3.1.1 allow remote attackers to execute arbitrary PHP code via a URL in the lang_filename parameter…
    cvelistv5