Multiple direct static code injection vulnerabilities in RunCMS before 1.6.1 allow remote authenticated administrators to inject arbitrary PHP code via the (1) header and (2) footer parameters to modules/system/admin.php in a meta-generator action, (3) the disclaimer parameter to modules/system/admin.php in a disclaimer action, (4) the disclaimer parameter to modules/mydownloads/admin/index.php in a mydownloadsConfigAdmin action, (5) the disclaimer parameter to modules/newbb_plus/admin/forum_config.php, (6) the disclaimer parameter to modules/mylinks/admin/index.php in a myLinksConfigAdmin action, or (7) the intro parameter to modules/sections/admin/index.php in a secconfig action, which inject PHP sequences into (a) sections/cache/intro.php, (b) mylinks/cache/disclaimer.php, (c) mydownloads/cache/disclaimer.php, (d) newbb_plus/cache/disclaimer.php, (e) system/cache/disclaimer.php, (f) system/cache/footer.php, (g) system/cache/header.php, or (h) system/cache/maintenance.php in modules/.
References
Configurations
History
21 Nov 2024, 00:40
Type | Values Removed | Values Added |
---|---|---|
References | () http://osvdb.org/41247 - | |
References | () http://osvdb.org/41248 - | |
References | () http://osvdb.org/41249 - | |
References | () http://osvdb.org/41250 - | |
References | () http://osvdb.org/41251 - | |
References | () http://securityreason.com/securityalert/3493 - | |
References | () http://www.runcms.org/modules/mydownloads/singlefile.php?lid=131 - | |
References | () http://www.securityfocus.com/archive/1/485512/100/0/threaded - | |
References | () http://www.securityfocus.com/bid/27019 - Exploit, Patch | |
References | () https://www.exploit-db.com/exploits/4790 - |
Information
Published : 2007-12-28 00:46
Updated : 2024-11-21 00:40
NVD link : CVE-2007-6548
Mitre link : CVE-2007-6548
CVE.ORG link : CVE-2007-6548
JSON object : View
Products Affected
runcms
- runcms
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')