CVE-2007-1976: High severity Xoops Xoops Virii Info Module vulnerability
DISPUTED PHP remote file inclusion vulnerability in index.php in the Virii Info 1.10 and earlier module for Xoops allows remote attackers to execute arbitrary PHP code via a URL in the xoopsConfig[rootpath] parameter. NOTE: the issue has been disputed by a reliable third party, stating that the application's checkSuperglobals function defends against the attack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1976?
CVE-2007-1976 is classified as a remote file inclusion vulnerability that may allow arbitrary code execution.
How do I fix CVE-2007-1976?
To fix CVE-2007-1976, upgrade the Xoops Virii Info module to a version later than 1.10 or apply any available security patches.
Which versions are affected by CVE-2007-1976?
CVE-2007-1976 affects the Virii Info module for Xoops version 1.10 and earlier.
Can CVE-2007-1976 be exploited remotely?
Yes, CVE-2007-1976 can be exploited remotely by attackers to execute arbitrary PHP code.
Is CVE-2007-1976 still a threat to Xoops users?
CVE-2007-1976 may still pose a threat if users have not updated to secure versions of the Xoops Virii Info module.