Vulnerability in Trackeur

CVE-2007-4383

PHP remote file inclusion vulnerability in tracking.php in Trackeur 1 allows remote attackers to execute arbitrary PHP code via a URL in the header parameter. NOTE: CVE and a third party dispute this vulnerability because header is defined before use. The researcher is known to be unreliable

EPSS: 0.013 (68.3th percentile) — read the EPSS interpretation.

Affected products

  • Trackeur — versions 1
  • N/a — versions n/a

References