Published: 31/07/2007 Updated: 15/10/2018

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 695

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote malicious users to execute arbitrary PHP code via the Madoa parameter to (1) index.php, (2) vote.php, and (3) admin.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
global centre aplomb poll 1.1

source: wwwsecurityfocuscom/bid/25138/info Aplomb Poll is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver proce ...

source: wwwsecurityfocuscom/bid/25138/info Aplomb Poll is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver pro ...

NVD-CWE-Other http://www.attrition.org/pipermail/vim/2007-July/001739.html http://www.securityfocus.com/bid/25138 http://securityreason.com/securityalert/2937 http://osvdb.org/37263 http://osvdb.org/37262 http://osvdb.org/37264 http://www.securityfocus.com/archive/1/475096/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/30436/

CVE-2007-4101

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect