What is CVE-2007-0863?

CVE-2007-0863 is a vulnerability in Trevorchan. Published 2007-02-09.

Is CVE-2007-0863 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Trevorchan

CVE-2007-0863

PHP remote file inclusion vulnerability in Trevorchan 0.7 and earlier allows remote attackers to execute arbitrary code via the tc_config[rootdir] parameter to (1) upgrade.php, (2) paint_save.php, (3) menu.php, (4) manage.php, and (5) banned.php. NOTE: his issue has been disputed by reliable third parties, who state that the variable is set before use in config.php

EPSS: 0.038 (88.8th percentile) — read the EPSS interpretation.

Affected products

Trevorchan
N/a — versions n/a

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
cve@mitre.org (mailing-list, x_refsource_VIM)

Frequently asked questions

What is CVE-2007-0863?: CVE-2007-0863 is a vulnerability in Trevorchan. Published 2007-02-09.
Is CVE-2007-0863 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.