CVE-2007-4485 | BDVDB-2026-25987 Detail

Description#

PHP remote file inclusion vulnerability in visitor.php in Butterfly online visitors counter 1.08, when used with certain older versions of PHP with improper SERVER superglobal handling, allows remote attackers to execute arbitrary PHP code via a URL in the _SERVER[DOCUMENT_ROOT] parameter. NOTE: it could be argued that this vulnerability is caused by a problem in PHP and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in Butterfly online visitors counter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://securityvulns.com/Rdocument845.html
http://www.securityfocus.com/archive/1/477253/100/0/threaded
http://www.securityfocus.com/archive/1/482006/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/36147
http://securityvulns.com/source26994.html
http://osvdb.org/38327

Exploit#

No public exploit known

History#

Version 12007-08-22Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.