CVE-2007-3792

AzDG Dating Gold 3.0.5 - RCE

Title source: llm
STIX 2.1

Description

Multiple PHP remote file inclusion vulnerabilities in AzDG Dating Gold 3.0.5 allow remote attackers to execute arbitrary PHP code via a URL in the int_path parameter to (1) header.php, (2) footer.php, or (3) secure.admin.php in templates/.

Exploits (3)

exploitdb WRITEUP VERIFIED
by mostafa_ragab · textwebappsphp
https://www.exploit-db.com/exploits/30303
exploitdb WRITEUP VERIFIED
by mostafa_ragab · textwebappsphp
https://www.exploit-db.com/exploits/30301
exploitdb WRITEUP VERIFIED
by mostafa_ragab · textwebappsphp
https://www.exploit-db.com/exploits/30302

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/36263
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/473664/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/36262
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/35428
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/2888
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/24910
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/36264

Scores

EPSS 0.0958
EPSS Percentile 92.9%

Details

Status published
Products (1)
azerbaijan_development_group/azdgdating 3.0.5 gold
Published Jul 15, 2007
Tracked Since Feb 18, 2026