CVE-2007-1393

CRITICO 10.0CVE-2007-1393 · Published 10/03/2007 · updated 16/06/2026

In breve

CVE-2007-1393 è una vulnerabilità CRITICO (CVSS 10.0) che riguarda magic cms (geo soft).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 4.9%, superiore al 92.1% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
magic cms geo_soft	`= 4.2.747`	No fix yet

Description

PHP remote file inclusion vulnerability in mysave.php in Magic CMS 4.2.747 allows remote attackers to execute arbitrary PHP code via a URL in the file parameter.

References

osvdb.org/33893
secunia.com/advisories/24439
securityfocus.com/bid/22162 · Exploit
vupen.com/english/advisories/2007/0881
exchange.xforce.ibmcloud.com/vulnerabilities/32883
exploit-db.com/exploits/3438

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free