Unscored severity · published Feb 22, 2007
CVE-2007-1073
Static code injection vulnerability in install.php in mcRefer allows remote attackers to execute arbitrary PHP code via the bgcolor parameter, which is inserted into…
–
CVSS
2.3%
EPSS
No
On KEV
Description
Static code injection vulnerability in install.php in mcRefer allows remote attackers to execute arbitrary PHP code via the bgcolor parameter, which is inserted into mcrconf.inc.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MC
Mcrefer · Mcrefer
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1073
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1073
osvdb.org
http://osvdb.org/42619
securityreason.com
http://securityreason.com/securityalert/2283
www.securityfocus.com
http://www.securityfocus.com/archive/1/459796/100/200/threaded
More from Mcrefer
–
CVE-2007-0875
SQL injection vulnerability in install.php in mcRefer allows remote attackers to execute arbitrary SQL commands via unspecified vectors