CVE-2007-4339

ALTO 7.5CVE-2007-4339 · Published 14/08/2007 · updated 16/06/2026

In breve

CVE-2007-4339 è una vulnerabilità ALTO (CVSS 7.5) che riguarda poll script (phpcentral).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.8%, superiore al 79.0% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
poll script phpcentral	`= 1.0`	No fix yet

Description

Multiple PHP remote file inclusion vulnerabilities in PHPCentral Poll Script 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the _SERVER[DOCUMENT_ROOT] parameter in (1) poll.php and (2) pollarchive.php. NOTE: a reliable third party states that this issue is resultant from a variable extraction error in functions.php.

References

osvdb.org/36418
osvdb.org/36419
secunia.com/advisories/26434 · Vendor Advisory
securityreason.com/securityalert/3008
securityfocus.com/archive/1/476261/100/0/threaded
securityfocus.com/archive/1/477179/100/0/threaded
vupen.com/english/advisories/2007/2878 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free