NVD

Id
54146  
Name
CVE-2007-1976  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in index.php in the Virii Info 1.10 and earlier module for Xoops allows remote attackers to execute arbitrary PHP code via a URL in the xoopsConfig[root_path] parameter. NOTE: the issue has been disputed by a reliable third party, stating that the application"s checkSuperglobals function defends against the attack.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-04-11  
Modified Date
2011-03-07  
Seq
2007-1976  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
274587 54146 CVE-2007-1976 20070403 Bogus - [Xoops Module Virii Info <= 1.10 (index.php) Remote File Include Exploit]  View
274588 54146 CVE-2007-1976 20070403 Bogus - [Xoops Module Virii Info <= 1.10 (index.php) Remote File Include Exploit]  View
274589 54146 CVE-2007-1976 3642  View
274590 54146 CVE-2007-1976 ADV-2007-1206  View
274591 54146 CVE-2007-1976 xoops-virii-index-file-include(33368)  View

Related JVN