Remote File Inclusion Vulnerabilities in PMB Services by PMB
CVE-2007-1415
Currently unrated
Key Information:
- Vendor
Pmb Services
- Status
- Vendor
- CVE Published:
- 12 March 2007
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 10%
What is CVE-2007-1415?
PMB Services versions prior to 3.0.14 are susceptible to several remote file inclusion (RFI) vulnerabilities. These weaknesses allow attackers to execute arbitrary PHP code, potentially compromising the system. The vulnerabilities may be exploited through various parameters in multiple script files, such as class_path, base_path, and include_path. Successful exploitation could lead to unauthorized access and manipulation of application functionality, posing significant security risks.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.