CVE-2007-2428

EUVD-2007-2423 · Published May 2, 2007

Multiple PHP remote file inclusion vulnerabilities in page.php in Ahhp-Portal allow remote attackers to execute arbitrary PHP code via a URL in the (1) fp or (2) sc parameter.

Technologies

Ahhp-Portal Ahhp-Portal

Weaknesses

CWE-94

CVSS scores

v2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access Stealth

T1190Exploit Public-Facing Application T1027.006HTML Smuggling T1027.009Embedded Payloads T1564.009Resource Forking

References

http://www.securityfocus.com/bid/23658
http://securityvulns.com/Qdocument838.html
http://securityvulns.com/source13951.html
http://www.osvdb.org/36568
http://www.securityfocus.com/archive/1/477253/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/34443

Potentially impacted assets

See if this affects your attack surface