Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
9
CVSSv2

CVE-2007-1635

Published: 23/03/2007 Updated: 16/10/2018
CVSS v2 Base Score: 9 | Impact Score: 10 | Exploitability Score: 8
VMScore: 905
Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Subscribe to Net Portal Dynamic System

Vulnerability Summary

Static code injection vulnerability in admin/settings.php in Net Portal Dynamic System (NPDS) 5.10 and previous versions allows remote authenticated users to inject arbitrary PHP code via the xtop parameter in a "ConfigSave" op to admin.php, which can later be accessed via a "Configure" op to admin.php.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

net portal dynamic system net portal dynamic system

Exploits

Exploit DB: Net Portal Dynamic System (NPDS) 5.10 - Remote Code Execution (1)
#!/usr/bin/php <?php error_reporting(E_ALL ^ E_NOTICE); # Advisory soon if($argc < 3) { print(" TITLE | Net Portal Dynamic System (NPDS) <= 510 Remote Code Execution 0day AUTHOR | DarkFig \/ wwwacid-rootnewfr \/ gmdarkfig@gmailcom NOTE | Works regardless of php settings USAGE | $argv[0] -url <url> [Options] OPTIO ...

References

NVD-CWE-Otherhttp://secunia.com/advisories/24571http://securityreason.com/securityalert/2473http://osvdb.org/34303http://www.securityfocus.com/archive/1/463176/100/0/threadedhttps://nvd.nist.govhttps://www.exploit-db.com/exploits/3505/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook