CyberSec.Space Logo
CVEブラウザに戻る

CVE-2007-1391

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0140%
EPSS Percentile42.63th
Published2007年3月10日
Last Modified2026年4月23日

Vulnerability Description

PHP remote file inclusion vulnerability in modules/abook/foldertree.php in Leo West WEBO (aka weborganizer) 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the baseDir parameter.

Affected Platforms (CPE)

📦
Webo

Webo

= 1.0

References & Advisories

🔗 http://advisories.echo.or.id/adv/adv67-K-159-2007.txt
🔗 http://www.securityfocus.com/archive/1/462294/100/0/threaded
🔗 http://www.securityfocus.com/bid/22877
🔗 http://www.vupen.com/english/advisories/2007/0883
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/32877
🔗 https://www.exploit-db.com/exploits/3436
🔗 http://advisories.echo.or.id/adv/adv67-K-159-2007.txt
🔗 http://www.securityfocus.com/archive/1/462294/100/0/threaded

関連する脆弱性情報

CVE-2009-507110.0

Unspecified vulnerability in Palm Pre WebOS before 1.2.1 has unknown impact and attack vectors related to an "included contact tem...

CVE-2010-40259.3

Unspecified vulnerability in Doc Viewer in HP Palm webOS 1.4.1 allows remote attackers to execute arbitrary code via a crafted doc...

CVE-2011-17387.2

HP Palm webOS 1.4.5 and 1.4.5.1 does not properly restrict Plug-in Development Kit (PDK) applications, which allows local users to...

CVE-2009-50977.1

Palm Pre WebOS 1.1 and earlier processes JavaScript in email messages, which allows remote attackers to execute arbitrary JavaScri...