CVE-2007-1424: High severity Softnews Media Group DataLife Engine vulnerability
Multiple PHP remote file inclusion vulnerabilities in Softnews Media Group DataLife Engine allow remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter to (1) init.php and (2) Ajax/editnews.php. NOTE: some of these details are obtained from third party information.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The vulnerability is remotely exploitable over the network and does not require authentication. An attacker can supply a URL through the root_dir parameter to the affected scripts.
What is the likely impact of successful exploitation?
Successful exploitation can allow execution of arbitrary PHP code. This can compromise confidentiality, integrity, and availability of the affected application or server environment.
Which application components should be reviewed?
Review init.php and Ajax/editnews.php for use of the root_dir parameter. The reported issue affects DataLife Engine installations where those scripts accept an attacker-controlled URL in that parameter.