NVD

Id
52754  
Name
CVE-2007-0530  
Description
** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in Advanced Guestbook 2.4.2 allow remote attackers to execute arbitrary PHP code via a URL in the include_path parameter to (1) index.php, (2) addentry.php, or (3) picture.php, a different set of vectors than CVE-2006-5804. NOTE: this issue has been disputed by third party researchers, stating that the include_path variable is instantiated before use.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-01-25  
Modified Date
2008-09-05  
Seq
2007-0530  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
266654 52754 CVE-2007-0530 20070123 Re: Advanced Guestbook <=- 2.4.2 (include_path) Remote File Include Vulnerability  View
266655 52754 CVE-2007-0530 20070123 Advanced Guestbook <=- 2.4.2 (include_path) Remote File Include Vulnerability  View

Related JVN