NVD

Id
53048  
Name
CVE-2007-0831  
Description
** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in Atsphp 5.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the CONF[path] parameter to (1) index.php, (2) sources/usercp.php, or (3) sources/admin.php. NOTE: Another researcher has disputed this vulnerability, noting that CONF[path] is defined before use in index.php, that CONF[path] inclusion cannot occur through a direct request to other affected files, and that usercp.php is a typo of user_cp.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-02-07  
Modified Date
2010-07-01  
Seq
2007-0831  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
268290 53048 CVE-2007-0831 20070130 Atsphp 5.0.1 [Top Sites] [index.php] - Remote File Include  View
268291 53048 CVE-2007-0831 20070130 Re: BOGUS: Atsphp 5.0.1 [Top Sites] [index.php] - Remote File Include  View

Related JVN