CVE-2007-2289

ALTO 7.5CVE-2007-2289 · Published 26/04/2007 · updated 16/06/2026

En resumen

CVE-2007-2289 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a download-engine (alexscriptengine).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.3%, mayor que el 71.6% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
download-engine alexscriptengine	`= 1.4.1`	No fix yet

Description

PHP remote file inclusion vulnerability in admin/includes/spaw/dialogs/insert_link.php in download engine (Download-Engine) 1.4.1 allows remote authenticated users to execute arbitrary PHP code via a URL in the spaw_root parameter, a different vector than CVE-2007-2255. NOTE: this may be an issue in SPAW.

References

osvdb.org/35401
securityfocus.com/archive/1/466890/100/0/threaded
exchange.xforce.ibmcloud.com/vulnerabilities/33918

Más vulnerabilidades de download-engine

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free