CVE-2007-2670 | BDVDB-2026-24169 Detail

Description#

PHPChain 1.0 and earlier allows remote attackers to obtain the installation path via invalid values of the catid parameter to (1) settings.php or (2) cat.php, as demonstrated by XSS manipulations.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://pridels0.blogspot.com/2007/05/phpchain-vuln.html
http://osvdb.org/35538
http://www.vupen.com/english/advisories/2007/1647
http://www.securityfocus.com/bid/23761
https://exchange.xforce.ibmcloud.com/vulnerabilities/34019
http://secunia.com/advisories/25128

Exploit#

No public exploit known

History#

Version 12007-05-14Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.