Search
Find a vulnerability
Search criteria
2 vulnerabilities found for xoops_virii_info_module by xoops
CVE-2007-1976 (GCVE-0-2007-1976)
Vulnerability from nvd – Published: 2007-04-12 00:00 – Updated: 2024-08-07 13:13 Disputed
VLAI
EPSS
VEX
Summary
PHP remote file inclusion vulnerability in index.php in the Virii Info 1.10 and earlier module for Xoops allows remote attackers to execute arbitrary PHP code via a URL in the xoopsConfig[root_path] parameter. NOTE: the issue has been disputed by a reliable third party, stating that the application's checkSuperglobals function defends against the attack
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://www.exploit-db.com/exploits/3642 | exploitx_refsource_EXPLOIT-DB |
| http://www.vupen.com/english/advisories/2007/1206 | vdb-entryx_refsource_VUPEN |
| http://osvdb.org/37429 | vdb-entryx_refsource_OSVDB |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.attrition.org/pipermail/vim/2007-April… | mailing-listx_refsource_VIM |
| http://www.attrition.org/pipermail/vim/2007-April… | mailing-listx_refsource_VIM |
Date Public
2007-04-02 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T13:13:41.996Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "3642",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/3642"
},
{
"name": "ADV-2007-1206",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/1206"
},
{
"name": "37429",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/37429"
},
{
"name": "xoops-virii-index-file-include(33368)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33368"
},
{
"name": "20070403 Bogus - [Xoops Module Virii Info \u003c= 1.10 (index.php) Remote File Include Exploit]",
"tags": [
"mailing-list",
"x_refsource_VIM",
"x_transferred"
],
"url": "http://www.attrition.org/pipermail/vim/2007-April/001490.html"
},
{
"name": "20070403 Bogus - [Xoops Module Virii Info \u003c= 1.10 (index.php) Remote File Include Exploit]",
"tags": [
"mailing-list",
"x_refsource_VIM",
"x_transferred"
],
"url": "http://www.attrition.org/pipermail/vim/2007-April/001489.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-04-02T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "PHP remote file inclusion vulnerability in index.php in the Virii Info 1.10 and earlier module for Xoops allows remote attackers to execute arbitrary PHP code via a URL in the xoopsConfig[root_path] parameter. NOTE: the issue has been disputed by a reliable third party, stating that the application\u0027s checkSuperglobals function defends against the attack"
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-10-10T00:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "3642",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/3642"
},
{
"name": "ADV-2007-1206",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/1206"
},
{
"name": "37429",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/37429"
},
{
"name": "xoops-virii-index-file-include(33368)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33368"
},
{
"name": "20070403 Bogus - [Xoops Module Virii Info \u003c= 1.10 (index.php) Remote File Include Exploit]",
"tags": [
"mailing-list",
"x_refsource_VIM"
],
"url": "http://www.attrition.org/pipermail/vim/2007-April/001490.html"
},
{
"name": "20070403 Bogus - [Xoops Module Virii Info \u003c= 1.10 (index.php) Remote File Include Exploit]",
"tags": [
"mailing-list",
"x_refsource_VIM"
],
"url": "http://www.attrition.org/pipermail/vim/2007-April/001489.html"
}
],
"tags": [
"disputed"
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-1976",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** DISPUTED ** PHP remote file inclusion vulnerability in index.php in the Virii Info 1.10 and earlier module for Xoops allows remote attackers to execute arbitrary PHP code via a URL in the xoopsConfig[root_path] parameter. NOTE: the issue has been disputed by a reliable third party, stating that the application\u0027s checkSuperglobals function defends against the attack."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "3642",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/3642"
},
{
"name": "ADV-2007-1206",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/1206"
},
{
"name": "37429",
"refsource": "OSVDB",
"url": "http://osvdb.org/37429"
},
{
"name": "xoops-virii-index-file-include(33368)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33368"
},
{
"name": "20070403 Bogus - [Xoops Module Virii Info \u003c= 1.10 (index.php) Remote File Include Exploit]",
"refsource": "VIM",
"url": "http://www.attrition.org/pipermail/vim/2007-April/001490.html"
},
{
"name": "20070403 Bogus - [Xoops Module Virii Info \u003c= 1.10 (index.php) Remote File Include Exploit]",
"refsource": "VIM",
"url": "http://www.attrition.org/pipermail/vim/2007-April/001489.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-1976",
"datePublished": "2007-04-12T00:00:00.000Z",
"dateReserved": "2007-04-11T00:00:00.000Z",
"dateUpdated": "2024-08-07T13:13:41.996Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2007-1976 (GCVE-0-2007-1976)
Vulnerability from cvelistv5 – Published: 2007-04-12 00:00 – Updated: 2024-08-07 13:13 Disputed
VLAI
EPSS
VEX
Summary
PHP remote file inclusion vulnerability in index.php in the Virii Info 1.10 and earlier module for Xoops allows remote attackers to execute arbitrary PHP code via a URL in the xoopsConfig[root_path] parameter. NOTE: the issue has been disputed by a reliable third party, stating that the application's checkSuperglobals function defends against the attack
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://www.exploit-db.com/exploits/3642 | exploitx_refsource_EXPLOIT-DB |
| http://www.vupen.com/english/advisories/2007/1206 | vdb-entryx_refsource_VUPEN |
| http://osvdb.org/37429 | vdb-entryx_refsource_OSVDB |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.attrition.org/pipermail/vim/2007-April… | mailing-listx_refsource_VIM |
| http://www.attrition.org/pipermail/vim/2007-April… | mailing-listx_refsource_VIM |
Date Public
2007-04-02 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T13:13:41.996Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "3642",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/3642"
},
{
"name": "ADV-2007-1206",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/1206"
},
{
"name": "37429",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/37429"
},
{
"name": "xoops-virii-index-file-include(33368)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33368"
},
{
"name": "20070403 Bogus - [Xoops Module Virii Info \u003c= 1.10 (index.php) Remote File Include Exploit]",
"tags": [
"mailing-list",
"x_refsource_VIM",
"x_transferred"
],
"url": "http://www.attrition.org/pipermail/vim/2007-April/001490.html"
},
{
"name": "20070403 Bogus - [Xoops Module Virii Info \u003c= 1.10 (index.php) Remote File Include Exploit]",
"tags": [
"mailing-list",
"x_refsource_VIM",
"x_transferred"
],
"url": "http://www.attrition.org/pipermail/vim/2007-April/001489.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-04-02T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "PHP remote file inclusion vulnerability in index.php in the Virii Info 1.10 and earlier module for Xoops allows remote attackers to execute arbitrary PHP code via a URL in the xoopsConfig[root_path] parameter. NOTE: the issue has been disputed by a reliable third party, stating that the application\u0027s checkSuperglobals function defends against the attack"
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-10-10T00:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "3642",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/3642"
},
{
"name": "ADV-2007-1206",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/1206"
},
{
"name": "37429",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/37429"
},
{
"name": "xoops-virii-index-file-include(33368)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33368"
},
{
"name": "20070403 Bogus - [Xoops Module Virii Info \u003c= 1.10 (index.php) Remote File Include Exploit]",
"tags": [
"mailing-list",
"x_refsource_VIM"
],
"url": "http://www.attrition.org/pipermail/vim/2007-April/001490.html"
},
{
"name": "20070403 Bogus - [Xoops Module Virii Info \u003c= 1.10 (index.php) Remote File Include Exploit]",
"tags": [
"mailing-list",
"x_refsource_VIM"
],
"url": "http://www.attrition.org/pipermail/vim/2007-April/001489.html"
}
],
"tags": [
"disputed"
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-1976",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** DISPUTED ** PHP remote file inclusion vulnerability in index.php in the Virii Info 1.10 and earlier module for Xoops allows remote attackers to execute arbitrary PHP code via a URL in the xoopsConfig[root_path] parameter. NOTE: the issue has been disputed by a reliable third party, stating that the application\u0027s checkSuperglobals function defends against the attack."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "3642",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/3642"
},
{
"name": "ADV-2007-1206",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/1206"
},
{
"name": "37429",
"refsource": "OSVDB",
"url": "http://osvdb.org/37429"
},
{
"name": "xoops-virii-index-file-include(33368)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33368"
},
{
"name": "20070403 Bogus - [Xoops Module Virii Info \u003c= 1.10 (index.php) Remote File Include Exploit]",
"refsource": "VIM",
"url": "http://www.attrition.org/pipermail/vim/2007-April/001490.html"
},
{
"name": "20070403 Bogus - [Xoops Module Virii Info \u003c= 1.10 (index.php) Remote File Include Exploit]",
"refsource": "VIM",
"url": "http://www.attrition.org/pipermail/vim/2007-April/001489.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-1976",
"datePublished": "2007-04-12T00:00:00.000Z",
"dateReserved": "2007-04-11T00:00:00.000Z",
"dateUpdated": "2024-08-07T13:13:41.996Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}