CVE-2007-4328

Bilder Galerie 1.0 - 'index.php' Remote File Inclusion

Severity Score

6.8

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Multiple PHP remote file inclusion vulnerabilities in Mapos Bilder Galerie 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the config[root_ordner] parameter to (1) index.php, (2) galerie.php, or (3) anzagien.php. NOTE: A later report states that 1.1 is also affected, but that the filename for vector 3 is anzeigen.php.

Múltiples vulnerabilidades de inclusión remota de archivos PHP en Mapos Bilder Galerie versión 1.0, permiten a atacantes remotos ejecutar código PHP arbitrario por medio de una URL en el parámetro config[root_ordner] en el archivo (1) index.php, (2) galerie.php, o (3) anzagien.php. NOTA: Un reporte posterior indica que la versión 1.1 también está afectada, pero que el nombre de archivo del vector 3 es anzeigen.php.

*Credits: N/A

CVSS Scores

NISTv2 6.8

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2007-08-09 First Exploit
2007-08-13 CVE Reserved
2007-08-14 CVE Published
2024-08-07 CVE Updated
2024-11-17 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-94: Improper Control of Generation of Code ('Code Injection')

CAPEC

References (10)

URL	Tag	Source
http://osvdb.org/36455	Vdb Entry
http://osvdb.org/36456	Vdb Entry
http://osvdb.org/36457	Vdb Entry
http://securityreason.com/securityalert/2999	Third Party Advisory
http://www.securityfocus.com/archive/1/475952/100/0/threaded	Mailing List
https://exchange.xforce.ibmcloud.com/vulnerabilities/35923	Vdb Entry

URL	Date	SRC
https://www.exploit-db.com/exploits/30480	2007-08-09
http://www.securityfocus.com/bid/25256	2024-08-07

URL	Date	SRC

URL	Date	SRC
http://secunia.com/advisories/26400	2018-10-15
http://www.vupen.com/english/advisories/2007/2838	2018-10-15

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Mapos Scripts Search vendor "Mapos Scripts"		Bilder Galerie Search vendor "Mapos Scripts" for product "Bilder Galerie"				1.0 Search vendor "Mapos Scripts" for product "Bilder Galerie" and version "1.0"		-		Affected
Mapos Scripts Search vendor "Mapos Scripts"		Bilder Galerie Search vendor "Mapos Scripts" for product "Bilder Galerie"				1.1 Search vendor "Mapos Scripts" for product "Bilder Galerie" and version "1.1"		-		Affected