返回 CVE 浏览器

CVE-2007-1073

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0780%

EPSS Percentile12.77th

Published2007年2月22日

Last Modified2026年4月23日

Vulnerability Description

Static code injection vulnerability in install.php in mcRefer allows remote attackers to execute arbitrary PHP code via the bgcolor parameter, which is inserted into mcrconf.inc.php.

Affected Platforms (CPE)

📦

Mcrefer

Mcrefer

All versions

References & Advisories

🔗 http://osvdb.org/42619

🔗 http://securityreason.com/securityalert/2283

🔗 http://www.securityfocus.com/archive/1/459796/100/200/threaded

🔗 http://osvdb.org/42619

🔗 http://securityreason.com/securityalert/2283

🔗 http://www.securityfocus.com/archive/1/459796/100/200/threaded

相关漏洞威胁

CVE-2007-08757.5

SQL injection vulnerability in install.php in mcRefer allows remote attackers to execute arbitrary SQL commands via unspecified ve...

CVE-2007-350010.0

Xeweb XEForum allows remote attackers to gain privileges via a modified xeforum cookie.

CVE-2007-049610.0

PHP remote file inclusion vulnerability in lib/nl/nl.php in Neon Labs Website (nlws) 3.2 and earlier allows remote attackers to ex...

CVE-2007-195910.0

Unspecified vulnerability in the process_cmdent function in command.cpp in TinyMUX before 2.4 has unknown impact and attack vector...