CVE-2007-5054

Izicontents < 1_rc6 - Code Injection

Title source: rule

Description

Multiple PHP remote file inclusion vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the gsLanguage parameter to (1) search/search.php, (2) poll/inlinepoll.php, (3) poll/showpoll.php, (4) links/showlinks.php, or (5) links/submit_links.php in modules/.

Exploits (1)

exploitdb WORKING POC VERIFIED

by irk4z · textwebappsphp

https://www.exploit-db.com/exploits/4441

View Code ZIP pw:eip

References (4)

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/36734

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/4441

[Third Party Advisory] http://secunia.com/advisories/26931

[Third Party Advisory] http://www.vupen.com/english/advisories/2007/3260

Scores

EPSS 0.8023

EPSS Percentile 99.1%

Details

CWE

CWE-94

Status published

Products (1)

izicontents/izicontents < 1_rc6

Published Sep 24, 2007

Tracked Since Feb 18, 2026