First published: Tue Feb 27 2007(Updated: )
Multiple PHP remote file inclusion vulnerabilities in CutePHP CuteNews 1.3.6 allow remote attackers to execute arbitrary PHP code via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: issue might overlap CVE-2004-1660 or CVE-2006-4445.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
CutePHP CuteNews | =1.3.6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-1153 has been classified as a high severity vulnerability due to the potential for remote code execution.
To fix CVE-2007-1153, it is recommended to upgrade CutePHP CuteNews to a version that does not contain this vulnerability.
CVE-2007-1153 specifically affects CutePHP CuteNews version 1.3.6.
CVE-2007-1153 is a remote file inclusion vulnerability that allows attackers to execute arbitrary PHP code.
Yes, successful exploitation of CVE-2007-1153 can lead to a full compromise of the affected system, enabling attackers to execute additional malicious actions.