CVE-2007-5168

Published: Oct 1, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Multiple PHP remote file inclusion vulnerabilities in ClanLite 1.23.01.2005 allow remote attackers to execute arbitrary PHP code via a URL in the root_path parameter to (1) modules/serveur_jeux.php or (2) conf/conf-php.php. NOTE: vector 1 is disputed by CVE because the require_once is only reached when a certain constant has already been defined.

Affected (1)

Products: Clanlite: Clanlite

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Clanlite Clanlite	Version 1.23.01.2005

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (6)

http://arfis.wordpress.com/2007/09/13/rfi-02-clanlite/

Source: cve@mitre.org

Exploit

http://osvdb.org/41055

Source: cve@mitre.org

http://osvdb.org/41056

Source: cve@mitre.org

http://arfis.wordpress.com/2007/09/13/rfi-02-clanlite/

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://osvdb.org/41055

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/41056

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.