CVE-2007-1643

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1860%

EPSS Percentile4.06th

Published2007年3月24日

Last Modified2026年4月23日

Vulnerability Description

Multiple PHP remote file inclusion vulnerabilities in LAN Management System (LMS) 1.8.9 Vala and earlier allow remote attackers to execute arbitrary PHP code via a URL in (1) the CONFIG[directories][userpanel_dir] parameter to userpanel.php or the (2) _LIB_DIR parameter to welcome.php.

Affected Platforms (CPE)

📦

Lan Management System

<= 1.8.9

References & Advisories

🔗 http://secunia.com/advisories/24621

🔗 http://www.attrition.org/pipermail/vim/2007-April/001560.html

🔗 http://www.securityfocus.com/bid/23099

🔗 http://www.securityfocus.com/bid/23100

🔗 http://www.vupen.com/english/advisories/2007/1086

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/33158

🔗 https://www.exploit-db.com/exploits/3545

🔗 http://secunia.com/advisories/24621

Vulnerability Description

Affected Platforms (CPE)

Lan Management System

References & Advisories

相关漏洞威胁