CVE-2007-6652

cpie.php in XCMS 1.83 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct direct static code injection…

published January 4, 2008

CVSS
—
EPSS
4%
Percentile
90.8
In the wild
Unconfirmed
What it is

cpie.php in XCMS 1.83 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct direct static code injection attacks and execute arbitrary code via the testo_0 parameter in a cpie admin action to index.php, which writes to dati/generali/footer.dtb (aka the XCMS footer).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04154 · 90.8th percentile
Published
2008-01-04T11:00Z
EPSS history
Timeline
  • 04 JAN 11:00Z
    cpie.php in XCMS 1.83 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct direct static code injection…
    cvelistv5