CVE-2007-2969

高危 7.5CVE-2007-2969 · Published 01/06/2007 · updated 16/06/2026

要点

CVE-2007-2969 是影响 wanewsletter (wanewsletter) 的高危 (CVSS 7.5)漏洞。
未来 30 天内被利用的概率（EPSS）：61.7%，高于 99.2% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
wanewsletter wanewsletter	`≤ 2.1.3`	No fix yet

Description

PHP remote file inclusion vulnerability in newsletter.php in WAnewsletter 2.1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the waroot parameter.

References

osvdb.org/38812
securityfocus.com/bid/24177 · Exploit
exploit-db.com/exploits/4000

wanewsletter 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free