CVE-2007-4807

ALTO 7.5CVE-2007-4807 · Published 11/09/2007 · updated 16/06/2026

In breve

CVE-2007-4807 è una vulnerabilità ALTO (CVSS 7.5) che riguarda focus sis (focus sis).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 3.2%, superiore al 88.3% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
focus sis focus_sis	`= 1.0= 2.2`	No fix yet

Description

Multiple PHP remote file inclusion vulnerabilities in Focus/SIS 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the staticpath parameter to (1) modules/Discipline/CategoryBreakdownTime.php or (2) modules/Discipline/StudentFieldBreakdown.php.

References

secunia.com/advisories/26775
osvdb.org/36997
osvdb.org/36998
securityfocus.com/bid/25603 · Exploit
vupen.com/english/advisories/2007/3133
exchange.xforce.ibmcloud.com/vulnerabilities/36523
exploit-db.com/exploits/4377

Altre vulnerabilità di focus sis

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free