Published: 26/07/2007 Updated: 14/02/2024

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 935

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

PHP remote file inclusion vulnerability in admin/business_inc/saveserver.php in SWSoft Confixx Pro 2.0.12 up to and including 3.3.1 allows remote malicious users to execute arbitrary PHP code via a URL in the thisdir parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
parallels confixx 3.3.1
parallels confixx 2.0.12

[*] Confixx <= PRO 331 Remote File Inclusion Vulnerability __________________________________________________________________________ [!] Application homepage : wwwswsoftcom/de/products/confixx/ [!] Author : H4 / XPK [!] Contact : xpkzxccom/ [!] Bug discovered : 2007-07-21 [!] Bug publ ...

CWE-94 http://www.securityfocus.com/bid/25036 http://xpkzxc.com/exploits/confixx.txt ftp://download1.swsoft.com/Confixx/security_hotfix/1/release_notes.txt http://secunia.com/advisories/26300 http://www.vupen.com/english/advisories/2007/2743 https://exchange.xforce.ibmcloud.com/vulnerabilities/35586 https://www.exploit-db.com/exploits/4219 https://nvd.nist.gov https://www.exploit-db.com/exploits/4219/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-4009

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect