CVE-2007-2301

Multiple PHP remote file inclusion vulnerabilities in audioCMS arash 0.1.4 allow remote attackers to execute arbitrary PHP code via a URL in the arashlib_dir…

published April 26, 2007

CVSS
—
EPSS
6%
Percentile
93.3
In the wild
Unconfirmed
What it is

Multiple PHP remote file inclusion vulnerabilities in audioCMS arash 0.1.4 allow remote attackers to execute arbitrary PHP code via a URL in the arashlib_dir parameter to (1) edit.inc.php and (2) list_features.inc.php in arash_lib/include, and (3) arash_gadmin.class.php and (4) arash_sadmin.class.php in arash_lib/class/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06076 · 93.3th percentile
Published
2007-04-26T21:00Z
EPSS history
Timeline
  • 26 APR 21:00Z
    Multiple PHP remote file inclusion vulnerabilities in audioCMS arash 0.1.4 allow remote attackers to execute arbitrary PHP code via a URL in the arashlib_dir…
    cvelistv5