Unscored severity · published Apr 12, 2007
CVE-2007-1976
PHP remote file inclusion vulnerability in index.php in the Virii Info 1.10 and earlier module for Xoops allows remote attackers to execute arbitrary PHP code via a URL in the…
–
CVSS
2%
EPSS
No
On KEV
Description
PHP remote file inclusion vulnerability in index.php in the Virii Info 1.10 and earlier module for Xoops allows remote attackers to execute arbitrary PHP code via a URL in the xoopsConfig[root_path] parameter. NOTE: the issue has been disputed by a reliable third party, stating that the application's checkSuperglobals function defends against the attack
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
XV
Xoops Virii Info Module · Xoops
through 1.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1976
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1976
osvdb.org
http://osvdb.org/37429
www.attrition.org
http://www.attrition.org/pipermail/vim/2007-April/001489.html
www.attrition.org
http://www.attrition.org/pipermail/vim/2007-April/001490.html
www.vupen.com
http://www.vupen.com/english/advisories/2007/1206
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/33368
www.exploit-db.com
https://www.exploit-db.com/exploits/3642