CVE-2007-2260

HIGH 7.5CVE-2007-2260 · Published 25/04/2007 · updated 16/06/2026

In short

CVE-2007-2260 is a HIGH (CVSS 7.5) vulnerability affecting mase (bibtex).
Chance of exploitation in the next 30 days (EPSS): 2.5%, higher than 84.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mase bibtex	`= 2.0_beta`	No fix yet

Description

Multiple PHP remote file inclusion vulnerabilities in bibtex mase beta 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the bibtexrootrel parameter to (1) unavailable.php, (2) source.php, (3) log.php, (4) latex.php, (5) indexinfo.php, (6) index.php, (7) importinfo.php, (8) import.php, (9) examplefile.php, (10) clearinfo.php, (11) clear.php, (12) aboutinfo.php, (13) about.php, and other unspecified files.

References

osvdb.org/35621
osvdb.org/35622
osvdb.org/35623
osvdb.org/35624
osvdb.org/35625
osvdb.org/35626
osvdb.org/35627
osvdb.org/35628
osvdb.org/35629
osvdb.org/35630
osvdb.org/35631
osvdb.org/35632
osvdb.org/35633
securityreason.com/securityalert/2624
securityfocus.com/archive/1/466683/100/0/threaded

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free