CVE-2007-2460

ALTO 7.5CVE-2007-2460 · Published 02/05/2007 · updated 16/06/2026

En resumen

CVE-2007-2460 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a firefly (firefly).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.8%, mayor que el 78.5% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
firefly firefly	`≤ 1.1.01`	No fix yet

Description

PHP remote file inclusion vulnerability in modules/admin/include/config.php in FireFly 1.1.01 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

References

attrition.org/pipermail/vim/2007-May/001573.html
vupen.com/english/advisories/2007/1554

Más vulnerabilidades de firefly

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free