38390vdb entry
http://osvdb.org/38390 CVE-2007-4818
Txx CMS 0.2 - Multiple Remote File Inclusions
Record summary
CVE-2007-4818 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
Multiple PHP remote file inclusion vulnerabilities in Txx CMS 0.2 allow remote attackers to execute arbitrary PHP code via a URL in the doc_root parameter to (1) addons/plugin.php, (2) addons/sidebar.php, (3) mail/index.php, or (4) mail/mailbox.php in modules/.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBTxx CMS 0.2 - Multiple Remote File InclusionsExploitDB exploitby Nice Name CrewNot analyzed1 file
References
1038391vdb entry
http://osvdb.org/38391 38392vdb entry
http://osvdb.org/38392 38393vdb entry
http://osvdb.org/38393 3116Third-party advisory
http://securityreason.com/securityalert/3116 20070908 TxxCMS_Multiple File inclusion Vulnerabiliesmailing list
http://www.securityfocus.com/archive/1/478870/100/0/threaded 25597vdb entry
http://www.securityfocus.com/bid/25597 txxcms-docroot-file-include(36511)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/36511 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2007-4818 4381exploit
https://www.exploit-db.com/exploits/4381