CoreCVE
Back

HIGH

PHP remote file inclusion vulnerability in admin/setup/level2.php in PHP Classifieds 6.04, and probably earlier versions, allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter

Published Apr 25, 2007

Description

PHP remote file inclusion vulnerability in admin/setup/level2.php in PHP Classifieds 6.04, and probably earlier versions, allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. NOTE: this product was referred to as "Allfaclassfieds" in the original disclosure.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (5)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner mitre
Published Apr 25, 2007
Updated Aug 7, 2024
Reserved Apr 25, 2007
Link CVE-2007-2254

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 16, 2026
Link CVE-2007-2254

Red Hat

No data

ENISA EUVD

Assigner mitre
Published Apr 25, 2007
Updated Aug 7, 2024
Link EUVD-2007-2249

GitHub

No data