CVE-2007-2527

2007-05-0823:00:00

mitre

www.cve.org

7.6 High

AI Score

Confidence

Low

0.131 Low

EPSS

Percentile

95.6%

JSON

Multiple PHP remote file inclusion vulnerabilities in DynamicPAD before 1.03.31 allow remote attackers to execute arbitrary PHP code via a URL in the HomeDir parameter to (1) dp_logs.php or (2) index.php.

References

attrition.org/pipermail/vim/2007-May/001591.html

attrition.org/pipermail/vim/2007-May/001593.html

dynamicpad.org/

secunia.com/advisories/25176

www.securityfocus.com/bid/23861

www.vupen.com/english/advisories/2007/1681

exchange.xforce.ibmcloud.com/vulnerabilities/34125

www.exploit-db.com/exploits/3868