First published: Fri Mar 23 2007(Updated: )
PHP remote file inclusion vulnerability in iframe.php in the iFrame Module for PHP-NUKE allows remote attackers to execute arbitrary PHP code via a URL in the file parameter.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Php-nuke Iframe Module |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-1626 is considered a critical security vulnerability that allows remote attackers to execute arbitrary PHP code.
To fix CVE-2007-1626, update the iFrame Module for PHP-NUKE to a version that addresses the remote file inclusion issue.
CVE-2007-1626 affects the iFrame Module for PHP-NUKE.
Exploiting CVE-2007-1626 can allow attackers to execute arbitrary PHP code, leading to full system compromise.
A temporary workaround for CVE-2007-1626 is to disable the iFrame Module until a patch is applied.