CVE-2007-4101 - Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote attackers to execu

CVE-2007-4101

Summary

Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote attackers to execute arbitrary PHP code via the Madoa parameter to (1) index.php, (2) vote.php, and (3) admin.php.

References

http://osvdb.org/37262
http://osvdb.org/37263
http://osvdb.org/37264
http://securityreason.com/securityalert/2937
http://www.attrition.org/pipermail/vim/2007-July/001739.html
http://www.securityfocus.com/archive/1/475096/100/0/threaded
http://www.securityfocus.com/bid/25138

Vulnerable Configurations

cpe:2.3:a:global_centre:aplomb_poll:1.1:*:*:*:*:*:*:*
cpe:2.3:a:global_centre:aplomb_poll:1.1:*:*:*:*:*:*:*

CVSS

Base:	6.8 (as of 15-10-2018 - 21:33)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:M/Au:N/C:P/I:P/A:P

refmap via4

bid	25138
bugtraq	20070730 Madoa Poll v1.1 Remote File Include Vulnerabilities
osvdb	37262 37263 37264
sreason	2937
vim	20070731 true: Madoa RFI

Last major update

15-10-2018 - 21:33

Published

31-07-2007 - 10:17

Last modified

15-10-2018 - 21:33