cve/2007/CVE-2007-0677.md

CVE-2007-0677

Description

PHP remote file inclusion vulnerability in fw/class.Quick_Config_Browser.php in Cadre PHP Framework 20020724 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[config][framework_path] parameter.

POC

Reference

• http://echo.or.id/adv/adv63-y3dips-2007.txt
• http://securityreason.com/securityalert/2215
• https://www.exploit-db.com/exploits/3237

Github

No PoCs found on GitHub currently.