CVE-2007-2670

Published: May 14, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

PHPChain 1.0 and earlier allows remote attackers to obtain the installation path via invalid values of the catid parameter to (1) settings.php or (2) cat.php, as demonstrated by XSS manipulations.

Affected (1)

Products: Globalmegacorp: Phpchain

Globalmegacorp

1 product

Phpchain

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Globalmegacorp Phpchain	Up to 1.0

References (12)

http://osvdb.org/35538

Source: cve@mitre.org

http://pridels0.blogspot.com/2007/05/phpchain-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/25128

Source: cve@mitre.org

http://www.securityfocus.com/bid/23761

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1647

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/34019

Source: cve@mitre.org

http://osvdb.org/35538