20070809 true with clarification: fishcart RFImailing list
http://www.attrition.org/pipermail/vim/2007-August/001757.html CVE-2007-4287
FishCart 3.2 RC2 - 'fc_example.php' Remote File Inclusion
Record summary
CVE-2007-4287 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
PHP remote file inclusion vulnerability in fc_functions/fc_example.php in FishCart 3.2 RC2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the docroot parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBFishCart 3.2 RC2 - 'fc_example.php' Remote File InclusionExploitDB exploitby k1n9k0ngNot analyzed1 file
References
4fishcart-fcexample-file-include(35888)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/35888 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2007-4287 4271exploit
https://www.exploit-db.com/exploits/4271