CVE-2007-4947 - Vulnerability Details - OpenCVE

Multiple PHP remote file inclusion vulnerabilities in myphpPagetool 0.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the ptinclude parameter to (1) help1.php, (2) help2.php, (3) help3.php, (4) help4.php, (5) help5.php, (6) help6.php, (7) help7.php, (7) help8.php, (8) help9.php, or (10) index.php in doc/admin/.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Myphppagetool	Myphppagetool

Configuration 1 [-]

cpe:2.3:a:myphppagetool:myphppagetool:0.4.3:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://arfis.wordpress.com/2007/09/14/rfi-03-myphppagetool/
http://osvdb.org/43150
http://osvdb.org/43151
http://osvdb.org/43152
http://osvdb.org/43153
http://osvdb.org/43154
http://osvdb.org/43155
http://osvdb.org/43156
http://osvdb.org/43157
http://osvdb.org/43158
http://osvdb.org/43159

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-09-18T20:00:00

Updated: 2024-08-07T15:17:28.213Z

Reserved: 2007-09-18T00:00:00

Link: CVE-2007-4947

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2007-09-18T20:17:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2007-4947

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-09-14T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple PHP remote file inclusion vulnerabilities in myphpPagetool 0.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the ptinclude parameter to (1) help1.php, (2) help2.php, (3) help3.php, (4) help4.php, (5) help5.php, (6) help6.php, (7) help7.php, (7) help8.php, (8) help9.php, or (10) index.php in doc/admin/."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2008-11-15T10:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "43152", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/43152"}, {"name": "43155", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/43155"}, {"name": "43150", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/43150"}, {"name": "43158", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/43158"}, {"name": "43157", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/43157"}, {"name": "43151", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/43151"}, {"name": "43154", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/43154"}, {"name": "43153", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/43153"}, {"name": "43156", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/43156"}, {"name": "43159", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/43159"}, {"tags": ["x_refsource_MISC"], "url": "http://arfis.wordpress.com/2007/09/14/rfi-03-myphppagetool/"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-4947", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple PHP remote file inclusion vulnerabilities in myphpPagetool 0.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the ptinclude parameter to (1) help1.php, (2) help2.php, (3) help3.php, (4) help4.php, (5) help5.php, (6) help6.php, (7) help7.php, (7) help8.php, (8) help9.php, or (10) index.php in doc/admin/."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "43152", "refsource": "OSVDB", "url": "http://osvdb.org/43152"}, {"name": "43155", "refsource": "OSVDB", "url": "http://osvdb.org/43155"}, {"name": "43150", "refsource": "OSVDB", "url": "http://osvdb.org/43150"}, {"name": "43158", "refsource": "OSVDB", "url": "http://osvdb.org/43158"}, {"name": "43157", "refsource": "OSVDB", "url": "http://osvdb.org/43157"}, {"name": "43151", "refsource": "OSVDB", "url": "http://osvdb.org/43151"}, {"name": "43154", "refsource": "OSVDB", "url": "http://osvdb.org/43154"}, {"name": "43153", "refsource": "OSVDB", "url": "http://osvdb.org/43153"}, {"name": "43156", "refsource": "OSVDB", "url": "http://osvdb.org/43156"}, {"name": "43159", "refsource": "OSVDB", "url": "http://osvdb.org/43159"}, {"name": "http://arfis.wordpress.com/2007/09/14/rfi-03-myphppagetool/", "refsource": "MISC", "url": "http://arfis.wordpress.com/2007/09/14/rfi-03-myphppagetool/"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T15:17:28.213Z"}, "title": "CVE Program Container", "references": [{"name": "43152", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/43152"}, {"name": "43155", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/43155"}, {"name": "43150", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/43150"}, {"name": "43158", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/43158"}, {"name": "43157", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/43157"}, {"name": "43151", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/43151"}, {"name": "43154", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/43154"}, {"name": "43153", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/43153"}, {"name": "43156", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/43156"}, {"name": "43159", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/43159"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://arfis.wordpress.com/2007/09/14/rfi-03-myphppagetool/"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-4947", "datePublished": "2007-09-18T20:00:00", "dateReserved": "2007-09-18T00:00:00", "dateUpdated": "2024-08-07T15:17:28.213Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:myphppagetool:myphppagetool:0.4.3:*:*:*:*:*:*:*", "matchCriteriaId": "5F6977F4-1DA8-4F5A-9C1E-664E5FAD6723", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple PHP remote file inclusion vulnerabilities in myphpPagetool 0.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the ptinclude parameter to (1) help1.php, (2) help2.php, (3) help3.php, (4) help4.php, (5) help5.php, (6) help6.php, (7) help7.php, (7) help8.php, (8) help9.php, or (10) index.php in doc/admin/."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de inclusi\u00f3n remota de archivo en PHP en myphpPagetool 0.4.3 permiten a atacantes remotos ejecutar c\u00f3digo PHP de su elecci\u00f3n mediante un URL en el par\u00e1metro ptinclude de (1) help1.php, (2) help2.php, (3) help3.php, (4) help4.php, (5) help5.php, (6) help6.php, (7) help7.php, (7) help8.php, (8) help9.php, o (10) index.php in doc/admin/."}], "id": "CVE-2007-4947", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-09-18T20:17:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://arfis.wordpress.com/2007/09/14/rfi-03-myphppagetool/"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/43150"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/43151"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/43152"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/43153"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/43154"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/43155"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/43156"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/43157"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/43158"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/43159"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://arfis.wordpress.com/2007/09/14/rfi-03-myphppagetool/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/43150"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/43151"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/43152"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/43153"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/43154"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/43155"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/43156"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/43157"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/43158"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/43159"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-94"}], "source": "nvd@nist.gov", "type": "Primary"}]}