Vulnerability in Phpwebthings
CVE-2007-3141
PHP remote file inclusion vulnerability in core/editor.php in phpWebThings 1.5.2 allows remote attackers to execute arbitrary PHP code via a URL in the editor_insert_top parameter. NOTE: the editor_insert_bottom vector is already covered by CVE-2006-6042.
EPSS: 0.020 (78.3th percentile) — read the EPSS interpretation.
Affected products
- Phpwebthings — versions 1.5.2
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_SREASON, third-party-advisory)