CVE-2007-4737

Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library (STPHPLibrary) 0.8.0 allow remote attackers to execute arbitrary PHP code via a URL in the STPHPLIB_DIR parameter to (1) stphpapplication.php, (2) stphpbtnimage.php, or (3) stphpform.php.

Link	Resource
http://secunia.com/advisories/26658	Vendor Advisory
http://www.securityfocus.com/bid/25525
http://osvdb.org/38931
http://osvdb.org/38929
http://osvdb.org/38930
http://www.vupen.com/english/advisories/2007/3092
https://exchange.xforce.ibmcloud.com/vulnerabilities/36416
https://www.exploit-db.com/exploits/4358

Configuration 1

cpe:2.3:a:speedtech:stphplibrary:0.8.0:*:*:*:*:*:*:*

---

Published : 2007-09-06 07:17

Updated : 2017-09-29 01:29

---

NVD link : CVE-2007-4737

Mitre link : CVE-2007-4737

No products.

CWE-94