VulnerabilityModified
CVE-2007-5271
Multiple PHP remote file inclusion vulnerabilities in Trionic Cite CMS 1.2 rev9 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the bField[bf_data] parameter to (1) interface/editors/-custom.php or (2)…
MEDIUM 6.8EPSS 28.7%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 28.7%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
Multiple PHP remote file inclusion vulnerabilities in Trionic Cite CMS 1.2 rev9 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the bField[bf_data] parameter to (1) interface/editors/-custom.php or (2) interface/editors/custom.php.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 28.75% probability · 98th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-94
- Affected
- trionic/cite cms
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/27069
- http://www.securityfocus.com/bid/25933
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36972
- https://www.exploit-db.com/exploits/4485
- http://secunia.com/advisories/27069
- http://www.securityfocus.com/bid/25933
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36972
- https://www.exploit-db.com/exploits/4485
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.