Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.5
CVSSv2

CVE-2007-1233

Published: 03/03/2007 Updated: 11/10/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Subscribe to Stwc-counter

Vulnerability Summary

PHP remote file inclusion vulnerability in downloadcounter.php in STWC-Counter 3.4.0.0 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the stwc_counter_verzeichniss parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

stwc-counter stwc-counter 3.1.0

stwc-counter stwc-counter 3.0.3

stwc-counter stwc-counter 2.8.0

stwc-counter stwc-counter 2.7.1

stwc-counter stwc-counter 2.6.1

stwc-counter stwc-counter 2.6.0

stwc-counter stwc-counter 2.2.6

stwc-counter stwc-counter

stwc-counter stwc-counter 3.0.0

stwc-counter stwc-counter 2.9.1

stwc-counter stwc-counter 2.6.5

stwc-counter stwc-counter 2.6.4

stwc-counter stwc-counter 2.4.0

stwc-counter stwc-counter 2.3.1

stwc-counter stwc-counter 2.2.2

stwc-counter stwc-counter 2.2.1

stwc-counter stwc-counter 1.22

stwc-counter stwc-counter 1.21

stwc-counter stwc-counter 2.2.5

stwc-counter stwc-counter 2.1.0

stwc-counter stwc-counter 2.0.2

stwc-counter stwc-counter 1.11

stwc-counter stwc-counter 1.1

stwc-counter stwc-counter 1.02

stwc-counter stwc-counter 3.0.2

stwc-counter stwc-counter 3.0.1

stwc-counter stwc-counter 2.7.0

stwc-counter stwc-counter 2.6.6

stwc-counter stwc-counter 2.5.2

stwc-counter stwc-counter 2.5.1

stwc-counter stwc-counter 2.5.0

stwc-counter stwc-counter 2.2.4

stwc-counter stwc-counter 2.2.3

stwc-counter stwc-counter 2.0.1

stwc-counter stwc-counter 2.0.0

stwc-counter stwc-counter 1.01

stwc-counter stwc-counter 3.3.0

stwc-counter stwc-counter 3.2.0

stwc-counter stwc-counter 2.9.0

stwc-counter stwc-counter 2.8.1

stwc-counter stwc-counter 2.6.3

stwc-counter stwc-counter 2.6.2

stwc-counter stwc-counter 2.3.0

stwc-counter stwc-counter 2.2.7

stwc-counter stwc-counter 2.2.0

stwc-counter stwc-counter 2.1.1

stwc-counter stwc-counter 1.2

stwc-counter stwc-counter 1.12

Exploits

Exploit DB: STWC-Counter 3.4.0 - 'downloadcounter.php' Remote File Inclusion
<?php //File Inclusion Exploit for STWC-Counter <= 3400 //Found and Exploit Coded by burncycle - burncycle[(at)]robert-beran[(dot)]de //| //Vendor: wwwstwc-counterde/ //Dork: wwwstwc-counterde //| //Bug in "downloadcounterphp": // //$stwc_verzeichniss = $stwc_counter_verzeichniss; // //include($stwc_verzeichniss "funktio ...

References

CWE-94http://www.securityfocus.com/bid/22723http://secunia.com/advisories/24280http://osvdb.org/33777http://www.vupen.com/english/advisories/2007/0754https://exchange.xforce.ibmcloud.com/vulnerabilities/32681https://www.exploit-db.com/exploits/3379https://nvd.nist.govhttps://www.exploit-db.com/exploits/3379/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-22120CVE-2024-35921CVE-2024-35874brute forceCVE-2024-36080unprivilegedCVE-2024-35917IDORCVE-2024-4947
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook