PHP remote file inclusion vulnerability in admin/setup/level2.php in PHP Classifieds 6.04, and probably earlier versions, allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. NOTE: this product was referred to as "Allfaclassfieds" in the original disclosure.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published: 2007-04-25T17:00:00
Updated: 2024-08-07T13:33:28.373Z
Reserved: 2007-04-25T00:00:00
Link: CVE-2007-2254

No data.

Status : Modified
Published: 2007-04-25T17:19:00.000
Modified: 2024-11-21T00:30:18.950
Link: CVE-2007-2254

No data.