PHP Remote File Inclusion Vulnerabilities in Softnews Media Group DataLife Engine
CVE-2007-1424

Currently unrated

Key Information:

Vendor: Softnews Media Group
Status: Datalife Engine
Vendor: CVE Published:; 13 March 2007

🔔 Create Softnews Media Group Vulnerability Alert

What is CVE-2007-1424?

Multiple vulnerabilities exist in the Softnews Media Group DataLife Engine that enable remote attackers to conduct unauthorized activities on affected systems. Specifically, these vulnerabilities allow attackers to exploit the root_dir parameter to execute arbitrary PHP code through crafted URLs in the init.php and Ajax/editnews.php scripts, leading to potential unauthorized control over the web application.

References

http://www.securityfocus.com/bid/22913

vdb-entryx_refsource_BID

http://www.securityfocus.com/archive/1/462445/100/0/threaded

mailing-listx_refsource_BUGTRAQ

http://osvdb.org/35712

vdb-entryx_refsource_OSVDB

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 13, 2007
Vulnerability Reserved
Mar 12, 2007

CVE-2007-1424 Data

JSON