CVE-2007-4948

CVSS V2 Medium 5.1 CVSS V3 None

Description

Multiple PHP remote file inclusion vulnerabilities in Webmedia Explorer (webmex) 3.2.2 allow remote attackers to execute arbitrary PHP code via (1) a URL in the path_include parameter to includes/rss.class.php, (2) a URL in the path_template parameter to (a) templates/main.tpl.php or (b) templates/folder_messages_link_message_name.tpl.php, or (4) a URL in the path_templates parameter to templates/sidebar.tpl.php. NOTE: the vulnerability is present only when the administrator does not follow installation instructions about the requirement for .htaccess support. NOTE: the includes/core.lib.php vector is already covered by CVE-2006-5252.

Overview

CVE ID
CVE-2007-4948

Assigner
cve@mitre.org

Vulnerability Status
Modified

Published Version
2007-09-18T20:17:00

Last Modified Date
2008-11-15T06:59:10

Weakness Enumerations

CWE	URL
CWE-94	http://cwe.mitre.org/data/definitions/94.html

CPE Configuration (Product)

CPE	Vulnerable	Operator	Version Start	Version End
cpe:2.3:a:webmedia_explorer:webmedia_explorer:3.2.2:::::::*	1	OR

CVSS Version 2

Version
2.0

Vector String
AV:N/AC:H/Au:N/C:P/I:P/A:P

Access Vector
NETWORK

Access Compatibility
HIGH

Authentication
NONE

Confidentiality Impact
PARTIAL

Integrity Impact
PARTIAL

Availability Impact
PARTIAL

Base Score
5.1

Severity
MEDIUM

Exploitability Score
4.9

Impact Score
6.4

References

Reference URL	Reference Tags
http://arfis.wordpress.com/2007/09/14/rfi-03-webmedia-explorer/
http://osvdb.org/43142
http://osvdb.org/43143
http://osvdb.org/43141
http://osvdb.org/43140

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2007-4948
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4948

History

Created	Old Value	New Value	Data Type	Notes
2022-05-10 11:17:13				Added to TrackCVE