CVE-2007-3451 - Vulnerability Details - OpenCVE

PHP remote file inclusion vulnerability in admin/index.php in 6ALBlog allows remote authenticated administrators to execute arbitrary PHP code via a URL in the pg parameter.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Gorani Network	6alblog

Configuration 1 [-]

cpe:2.3:a:gorani_network:6alblog:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://osvdb.org/37013
http://secunia.com/advisories/25834
http://www.securityfocus.com/bid/24632
http://www.vupen.com/english/advisories/2007/2323
https://exchange.xforce.ibmcloud.com/vulnerabilities/35157
https://www.exploit-db.com/exploits/4104

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-06-27T00:00:00

Updated: 2024-08-07T14:14:13.321Z

Reserved: 2007-06-26T00:00:00

Link: CVE-2007-3451

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2007-06-27T00:30:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2007-3451

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-06-26T00:00:00", "descriptions": [{"lang": "en", "value": "PHP remote file inclusion vulnerability in admin/index.php in 6ALBlog allows remote authenticated administrators to execute arbitrary PHP code via a URL in the pg parameter."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-10-10T00:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "4104", "tags": ["exploit", "x_refsource_EXPLOIT-DB"], "url": "https://www.exploit-db.com/exploits/4104"}, {"name": "37013", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/37013"}, {"name": "25834", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/25834"}, {"name": "ADV-2007-2323", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/2323"}, {"name": "24632", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/24632"}, {"name": "6alblog-index-file-include(35157)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35157"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2007-3451", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "PHP remote file inclusion vulnerability in admin/index.php in 6ALBlog allows remote authenticated administrators to execute arbitrary PHP code via a URL in the pg parameter."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "4104", "refsource": "EXPLOIT-DB", "url": "https://www.exploit-db.com/exploits/4104"}, {"name": "37013", "refsource": "OSVDB", "url": "http://osvdb.org/37013"}, {"name": "25834", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/25834"}, {"name": "ADV-2007-2323", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/2323"}, {"name": "24632", "refsource": "BID", "url": "http://www.securityfocus.com/bid/24632"}, {"name": "6alblog-index-file-include(35157)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35157"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T14:14:13.321Z"}, "title": "CVE Program Container", "references": [{"name": "4104", "tags": ["exploit", "x_refsource_EXPLOIT-DB", "x_transferred"], "url": "https://www.exploit-db.com/exploits/4104"}, {"name": "37013", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/37013"}, {"name": "25834", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/25834"}, {"name": "ADV-2007-2323", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/2323"}, {"name": "24632", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/24632"}, {"name": "6alblog-index-file-include(35157)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35157"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-3451", "datePublished": "2007-06-27T00:00:00", "dateReserved": "2007-06-26T00:00:00", "dateUpdated": "2024-08-07T14:14:13.321Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:gorani_network:6alblog:*:*:*:*:*:*:*:*", "matchCriteriaId": "4BF612D7-739B-409A-8812-91B8CE41AA2A", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "PHP remote file inclusion vulnerability in admin/index.php in 6ALBlog allows remote authenticated administrators to execute arbitrary PHP code via a URL in the pg parameter."}, {"lang": "es", "value": "Vulnerabilidad de inclusi\u00f3n remota de archivo en PHP en admin/index.php de 6ALBlog permite a atacantes remotos ejecutar c\u00f3digo PHP de su elecci\u00f3n mediante un URL en el par\u00e1metro pg."}], "id": "CVE-2007-3451", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-06-27T00:30:00.000", "references": [{"source": "[email protected]", "url": "http://osvdb.org/37013"}, {"source": "[email protected]", "url": "http://secunia.com/advisories/25834"}, {"source": "[email protected]", "url": "http://www.securityfocus.com/bid/24632"}, {"source": "[email protected]", "url": "http://www.vupen.com/english/advisories/2007/2323"}, {"source": "[email protected]", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35157"}, {"source": "[email protected]", "url": "https://www.exploit-db.com/exploits/4104"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/37013"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/25834"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/24632"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2007/2323"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35157"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.exploit-db.com/exploits/4104"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "[email protected]", "type": "Primary"}]}