CVE-2007-3222: High severity Xoops Xfsection Module vulnerability
Published Jun 14, 2007
·Updated
PHP remote file inclusion vulnerability in modify.php in the XFsection 1.07 module for XOOPS allows remote attackers to execute arbitrary PHP code via a URL in the dirmodule parameter.
Affected Software
1 affected component
Xoops Xfsection Module=1.07
Event History
Jun 14, 2007
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-3222?
CVE-2007-3222 is classified as a high severity vulnerability due to its ability to allow remote code execution.
2
How do I fix CVE-2007-3222?
To fix CVE-2007-3222, update the XFsection module to a version that is not affected, preferably the latest stable release.
3
What systems are affected by CVE-2007-3222?
CVE-2007-3222 specifically affects the XFsection module version 1.07 for XOOPS.
4
What type of vulnerability is CVE-2007-3222?
CVE-2007-3222 is a remote file inclusion vulnerability.
5
Can CVE-2007-3222 be exploited by an unauthenticated attacker?
Yes, CVE-2007-3222 can be exploited by an unauthenticated remote attacker if they can access the affected script.