CVE-2007-2346 – PHP-Generics 1.0.0 Beta - Multiple Remote File Inclusions

https://notcve.org/view.php?id=CVE-2007-2346

Multiple PHP remote file inclusion vulnerabilities in PHP-Generics 1.0 beta allow remote attackers to execute arbitrary PHP code via a URL in the _APP_RELATIVE_PATH parameter to (1) include.php, (2) dbcommon/include.php, and (3) exception/include.php. Múltiples vulnerabilidades de inclusión remota de archivo en PHP en PHP-Generics 1.0 beta permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro the _APP_RELATIVE_PATH en (1) include.php, (2) dbcommon/include.php, y (3) exception/include.php. • https://www.exploit-db.com/exploits/3669 http://osvdb.org/35603 http://osvdb.org/35604 http://osvdb.org/35605 http://www.securityfocus.com/bid/23328 http://www.vupen.com/english/advisories/2007/1280 •