CVE-2007-2481
MEDIUM
6.8
CVSS 2.0
Description
PHP remote file inclusion vulnerability in wordtube-button.php in the wordTube 1.43 and earlier plugin for WordPress, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the wpPATH parameter.
Affected products and versions
- n/a n/a — Versions not specified
References
- advisories.echo.or.id http://advisories.echo.or.id/adv/adv81-K-159-2007.txt
- alexrabe.boelinger.com http://alexrabe.boelinger.com/ Exploit, Patch
- osvdb.org http://osvdb.org/34358
- secunia.com http://secunia.com/advisories/25074 Patch, Vendor Advisory
- securityreason.com http://securityreason.com/securityalert/2660
- www.securityfocus.com http://www.securityfocus.com/archive/1/467362/100/0/threaded
- www.securityfocus.com http://www.securityfocus.com/bid/23737 Exploit, Patch
- www.vupen.com http://www.vupen.com/english/advisories/2007/1615
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/33996
- www.exploit-db.com https://www.exploit-db.com/exploits/3825
- nvd.nist.gov Official NVD record