CVE-2007-1987

** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in PHPEcho CMS 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) _plugin_file parameter to smarty/internals/core.load_pulgins.php or the (2) root_path parameter to index.php. NOTE: CVE disputes (1) because the inclusion occurs within a function that is not called during a direct request. CVE disputes (2) because root_path is defined in config.php before use.

Link	Resource
http://securityreason.com/securityalert/2551
http://osvdb.org/34117
http://www.securityfocus.com/archive/1/464709/100/0/threaded

Configuration 1

cpe:2.3:a:phpecho_cms:phpecho_cms:2.0:*:*:*:*:*:*:*

---

Published : 2007-04-12 01:19

Updated : 2018-10-16 04:41

---

NVD link : CVE-2007-1987

Mitre link : CVE-2007-1987

No products.

NVD-CWE-Other