CVE-2007-1233

PHP remote file inclusion vulnerability in downloadcounter.php in STWC-Counter 3.4.0.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the stwc_counter_verzeichniss parameter.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:stwc-counter:stwc-counter:*:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:1.01:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:1.1:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:1.2:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:1.02:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:1.11:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:1.12:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:1.21:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:1.22:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:2.0.0:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:2.1.0:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:2.1.1:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:2.2.0:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:2.2.1:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:2.2.2:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:2.2.3:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:2.2.4:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:2.2.5:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:2.2.6:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:2.2.7:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:2.3.0:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:2.3.1:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:2.4.0:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:2.5.0:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:2.5.1:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:2.5.2:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:2.6.0:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:2.6.1:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:2.6.2:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:2.6.3:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:2.6.4:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:2.6.5:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:2.6.6:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:2.7.0:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:2.7.1:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:2.8.0:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:2.8.1:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:2.9.0:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:2.9.1:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:3.0.0:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:3.0.1:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:3.0.2:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:3.0.3:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:3.1.0:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:3.2.0:*:*:*:*:*:*:*
cpe:2.3:a:stwc-counter:stwc-counter:3.3.0:*:*:*:*:*:*:*

History

21 Nov 2024, 00:27

Type Values Removed Values Added
References () http://osvdb.org/33777 - () http://osvdb.org/33777 -
References () http://secunia.com/advisories/24280 - Vendor Advisory () http://secunia.com/advisories/24280 - Vendor Advisory
References () http://www.securityfocus.com/bid/22723 - () http://www.securityfocus.com/bid/22723 -
References () http://www.vupen.com/english/advisories/2007/0754 - () http://www.vupen.com/english/advisories/2007/0754 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/32681 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/32681 -
References () https://www.exploit-db.com/exploits/3379 - () https://www.exploit-db.com/exploits/3379 -

Information

Published : 2007-03-03 19:19

Updated : 2024-11-21 00:27


NVD link : CVE-2007-1233

Mitre link : CVE-2007-1233

CVE.ORG link : CVE-2007-1233


JSON object : View

Products Affected

stwc-counter

  • stwc-counter
CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')