Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.5
CVSSv2

CVE-2007-1634

Published: 23/03/2007 Updated: 16/10/2018
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Subscribe to Net Portal Dynamic System

Vulnerability Summary

Variable extraction vulnerability in grab_globals.php in Net Portal Dynamic System (NPDS) 5.10 and previous versions allows remote malicious users to conduct SQL injection attacks via the _FILES[DB][tmp_name] parameter to print.php, which overwrites the $DB variable with dynamic variable evaluation.

Vulnerable Product Search on Vulmon Subscribe to Product

net portal dynamic system net portal dynamic system

Exploits

Exploit DB: Net Portal Dynamic System (NPDS) 5.10 - Remote Code Execution (1)
#!/usr/bin/php <?php error_reporting(E_ALL ^ E_NOTICE); # Advisory soon if($argc < 3) { print(" TITLE | Net Portal Dynamic System (NPDS) <= 510 Remote Code Execution 0day AUTHOR | DarkFig \/ wwwacid-rootnewfr \/ gmdarkfig@gmailcom NOTE | Works regardless of php settings USAGE | $argv[0] -url <url> [Options] OPTIO ...

References

NVD-CWE-Otherhttp://www.attrition.org/pipermail/vim/2007-March/001460.htmlhttp://secunia.com/advisories/24571http://securityreason.com/securityalert/2473http://www.securityfocus.com/archive/1/463176/100/0/threadedhttps://nvd.nist.govhttps://www.exploit-db.com/exploits/3505/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook