CVE-2007-0182 (CNNVD-200701-174)
HIGH
有利用代码
中文标题:
Magic Photo Storage Website 多个PHP远程文件包含漏洞
英文标题:
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attac...
CVSS分数:
7.5
发布时间:
2007-01-11 02:00:00
漏洞类型:
授权问题
状态:
PUBLISHED
数据质量分数:
0.40
数据版本:
v31
漏洞描述
中文描述:
magic photo storage website中存在多个PHP远程文件包含漏洞。远程攻击者可以借助提交到admin/中的(1)admin_password.php,(2) add_welcome_text.php,(3)admin_email.php,(4)add_templates.php,(5)admin_paypal_email.php,(6)approve_member.php,(7)delete_member.php, (8)index.php,(9)list_members.php,(10)membership_pricing.php或(11)send_email.php；include/中的(12)config.php或(13)db_config.php；user/中的(14)add_category.php,(15)add_news.php,(16)change_catalog_template.php,(17)couple_milestone.php,(18)couple_profile.php,(19) delete_category.php,(20)index.php,(21)login.php,(22)logout.php,(23)register.php,(24)upload_photo.php,(25)user_catelog_password.php, (26)user_email.php,(27)user_extend.php或(28)user_membership_password.php的_config[site_path]参数中的一个URL，执行任意的PHP代码。
英文描述:
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbitrary PHP code via a URL in the _config[site_path] parameter to (1) admin_password.php, (2) add_welcome_text.php, (3) admin_email.php, (4) add_templates.php, (5) admin_paypal_email.php, (6) approve_member.php, (7) delete_member.php, (8) index.php, (9) list_members.php, (10) membership_pricing.php, or (11) send_email.php in admin/; (12) config.php or (13) db_config.php in include/; or (14) add_category.php, (15) add_news.php, (16) change_catalog_template.php, (17) couple_milestone.php, (18) couple_profile.php, (19) delete_category.php, (20) index.php, (21) login.php, (22) logout.php, (23) register.php, (24) upload_photo.php, (25) user_catelog_password.php, (26) user_email.php, (27) user_extend.php, or (28) user_membership_password.php in user/. NOTE: the include/common_function.php vector is already covered by another candidate from the same date.
CWE类型:
（暂无数据）
标签:
webapps
php
IbnuSina
OSVDB-33411
OSVDB-33412
OSVDB-33413
OSVDB-33414
OSVDB-33415
OSVDB-33416
OSVDB-33417
OSVDB-33418
OSVDB-33419
OSVDB-33420
OSVDB-33421
OSVDB-33422
OSVDB-33423
OSVDB-33425
OSVDB-33426
OSVDB-33427
OSVDB-33428
OSVDB-33429
OSVDB-33430
OSVDB-33431
OSVDB-33432
OSVDB-33433
OSVDB-33434
OSVDB-33435
OSVDB-33436
OSVDB-33437
OSVDB-33438
OSVDB-33439
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| scriptaty | magic_photo_storage_website | * | - | - |
cpe:2.3:a:scriptaty:magic_photo_storage_website:*:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
（暂无数据）
英文解决方案:
（暂无数据）
临时解决方案:
（暂无数据）
参考链接
33419
vdb-entry
cve.org
访问
cve.org
33433
vdb-entry
cve.org
访问
cve.org
33436
vdb-entry
cve.org
访问
cve.org
33432
vdb-entry
cve.org
访问
cve.org
33430
vdb-entry
cve.org
访问
cve.org
33439
vdb-entry
cve.org
访问
cve.org
33426
vdb-entry
cve.org
访问
cve.org
32668
vdb-entry
cve.org
访问
cve.org
33413
vdb-entry
cve.org
访问
cve.org
33411
vdb-entry
cve.org
访问
cve.org
33415
vdb-entry
cve.org
访问
cve.org
33420
vdb-entry
cve.org
访问
cve.org
33438
vdb-entry
cve.org
访问
cve.org
33425
vdb-entry
cve.org
访问
cve.org
33418
vdb-entry
cve.org
访问
cve.org
33427
vdb-entry
cve.org
访问
cve.org
2136
third-party-advisory
cve.org
访问
cve.org
33434
vdb-entry
cve.org
访问
cve.org
20070108 magic photo storage website Multiple Remote File Inclusion
mailing-list
cve.org
访问
cve.org
33423
vdb-entry
cve.org
访问
cve.org
33417
vdb-entry
cve.org
访问
cve.org
33412
vdb-entry
cve.org
访问
cve.org
33421
vdb-entry
cve.org
访问
cve.org
33428
vdb-entry
cve.org
访问
cve.org
33422
vdb-entry
cve.org
访问
cve.org
21965
vdb-entry
cve.org
访问
cve.org
33437
vdb-entry
cve.org
访问
cve.org
33414
vdb-entry
cve.org
访问
cve.org
33429
vdb-entry
cve.org
访问
cve.org
33435
vdb-entry
cve.org
访问
cve.org
33431
vdb-entry
cve.org
访问
cve.org
33416
vdb-entry
cve.org
访问
cve.org
ExploitDB EDB-29407
EXPLOIT
exploitdb
访问
exploitdb
Download Exploit EDB-29407
EXPLOIT
exploitdb
访问
exploitdb
CVE Reference: CVE-2007-0182
ADVISORY
cve.org
访问
cve.org
ExploitDB EDB-29408
EXPLOIT
exploitdb
访问
exploitdb
Download Exploit EDB-29408
EXPLOIT
exploitdb
访问
exploitdb
ExploitDB EDB-29409
EXPLOIT
exploitdb
访问
exploitdb
Download Exploit EDB-29409
EXPLOIT
exploitdb
访问
exploitdb
ExploitDB EDB-29410
EXPLOIT
exploitdb
访问
exploitdb
Download Exploit EDB-29410
EXPLOIT
exploitdb
访问
exploitdb
ExploitDB EDB-29411
EXPLOIT
exploitdb
访问
exploitdb
Download Exploit EDB-29411
EXPLOIT
exploitdb
访问
exploitdb
ExploitDB EDB-29412
EXPLOIT
exploitdb
访问
exploitdb
Download Exploit EDB-29412
EXPLOIT
exploitdb
访问
exploitdb
ExploitDB EDB-29413
EXPLOIT
exploitdb
访问
exploitdb
Download Exploit EDB-29413
EXPLOIT
exploitdb
访问
exploitdb
ExploitDB EDB-29414
EXPLOIT
exploitdb
访问
exploitdb
Download Exploit EDB-29414
EXPLOIT
exploitdb
访问
exploitdb
ExploitDB EDB-29415
EXPLOIT
exploitdb
访问
exploitdb
Download Exploit EDB-29415
EXPLOIT
exploitdb
访问
exploitdb
ExploitDB EDB-29416
EXPLOIT
exploitdb
访问
exploitdb
Download Exploit EDB-29416
EXPLOIT
exploitdb
访问
exploitdb
ExploitDB EDB-29417
EXPLOIT
exploitdb
访问
exploitdb
Download Exploit EDB-29417
EXPLOIT
exploitdb
访问
exploitdb
ExploitDB EDB-29418
EXPLOIT
exploitdb
访问
exploitdb
Download Exploit EDB-29418
EXPLOIT
exploitdb
访问
exploitdb
ExploitDB EDB-29419
EXPLOIT
exploitdb
访问
exploitdb
Download Exploit EDB-29419
EXPLOIT
exploitdb
访问
exploitdb
ExploitDB EDB-29420
EXPLOIT
exploitdb
访问
exploitdb
Download Exploit EDB-29420
EXPLOIT
exploitdb
访问
exploitdb
ExploitDB EDB-29421
EXPLOIT
exploitdb
访问
exploitdb
Download Exploit EDB-29421
EXPLOIT
exploitdb
访问
exploitdb
ExploitDB EDB-29422
EXPLOIT
exploitdb
访问
exploitdb
Download Exploit EDB-29422
EXPLOIT
exploitdb
访问
exploitdb
ExploitDB EDB-29423
EXPLOIT
exploitdb
访问
exploitdb
Download Exploit EDB-29423
EXPLOIT
exploitdb
访问
exploitdb
ExploitDB EDB-29424
EXPLOIT
exploitdb
访问
exploitdb
Download Exploit EDB-29424
EXPLOIT
exploitdb
访问
exploitdb
ExploitDB EDB-29425
EXPLOIT
exploitdb
访问
exploitdb
Download Exploit EDB-29425
EXPLOIT
exploitdb
访问
exploitdb
ExploitDB EDB-29426
EXPLOIT
exploitdb
访问
exploitdb
Download Exploit EDB-29426
EXPLOIT
exploitdb
访问
exploitdb
ExploitDB EDB-29427
EXPLOIT
exploitdb
访问
exploitdb
Download Exploit EDB-29427
EXPLOIT
exploitdb
访问
exploitdb
ExploitDB EDB-29428
EXPLOIT
exploitdb
访问
exploitdb
Download Exploit EDB-29428
EXPLOIT
exploitdb
访问
exploitdb
ExploitDB EDB-29429
EXPLOIT
exploitdb
访问
exploitdb
Download Exploit EDB-29429
EXPLOIT
exploitdb
访问
exploitdb
ExploitDB EDB-29430
EXPLOIT
exploitdb
访问
exploitdb
Download Exploit EDB-29430
EXPLOIT
exploitdb
访问
exploitdb
ExploitDB EDB-29431
EXPLOIT
exploitdb
访问
exploitdb
Download Exploit EDB-29431
EXPLOIT
exploitdb
访问
exploitdb
ExploitDB EDB-29432
EXPLOIT
exploitdb
访问
exploitdb
Download Exploit EDB-29432
EXPLOIT
exploitdb
访问
exploitdb
ExploitDB EDB-29433
EXPLOIT
exploitdb
访问
exploitdb
Download Exploit EDB-29433
EXPLOIT
exploitdb
访问
exploitdb
ExploitDB EDB-29434
EXPLOIT
exploitdb
访问
exploitdb
Download Exploit EDB-29434
EXPLOIT
exploitdb
访问
exploitdb
CVSS评分详情
7.5
HIGH
CVSS向量:
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS版本:
2.0
机密性
PARTIAL
完整性
PARTIAL
可用性
PARTIAL
时间信息
发布时间:
2007-01-11 02:00:00
修改时间:
2024-08-07 12:12:17
创建时间:
2025-11-11 15:32:40
更新时间:
2026-01-26 02:17:10
利用信息
此漏洞有可利用代码！
利用代码数量:
28
利用来源:
未知
未知
未知
未知
未知
未知
未知
未知
未知
未知
未知
未知
未知
未知
未知
未知
未知
未知
未知
未知
未知
未知
未知
未知
未知
未知
未知
未知
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2007-0182 |
2025-11-11 15:17:48 | 2025-11-11 07:32:40 |
| NVD | nvd_CVE-2007-0182 |
2025-11-11 14:52:08 | 2025-11-11 07:41:26 |
| CNNVD | cnnvd_CNNVD-200701-174 |
2025-11-11 15:08:54 | 2025-11-11 07:49:13 |
| EXPLOITDB | exploitdb_EDB-29407 |
2025-11-11 15:05:37 | 2025-11-11 08:24:56 |
| EXPLOITDB | exploitdb_EDB-29408 |
2025-11-11 15:05:37 | 2025-11-11 08:24:56 |
| EXPLOITDB | exploitdb_EDB-29409 |
2025-11-11 15:05:37 | 2025-11-11 08:24:56 |
| EXPLOITDB | exploitdb_EDB-29410 |
2025-11-11 15:05:37 | 2025-11-11 08:24:56 |
| EXPLOITDB | exploitdb_EDB-29411 |
2025-11-11 15:05:37 | 2025-11-11 08:24:56 |
| EXPLOITDB | exploitdb_EDB-29412 |
2025-11-11 15:05:37 | 2025-11-11 08:24:56 |
| EXPLOITDB | exploitdb_EDB-29413 |
2025-11-11 15:05:37 | 2025-11-11 08:24:56 |
| EXPLOITDB | exploitdb_EDB-29414 |
2025-11-11 15:05:37 | 2025-11-11 08:24:56 |
| EXPLOITDB | exploitdb_EDB-29415 |
2025-11-11 15:05:37 | 2025-11-11 08:24:56 |
| EXPLOITDB | exploitdb_EDB-29416 |
2025-11-11 15:05:37 | 2025-11-11 08:24:56 |
| EXPLOITDB | exploitdb_EDB-29417 |
2025-11-11 15:05:37 | 2025-11-11 08:24:56 |
| EXPLOITDB | exploitdb_EDB-29418 |
2025-11-11 15:05:37 | 2025-11-11 08:24:56 |
| EXPLOITDB | exploitdb_EDB-29419 |
2025-11-11 15:05:37 | 2025-11-11 08:24:56 |
| EXPLOITDB | exploitdb_EDB-29420 |
2025-11-11 15:05:37 | 2025-11-11 08:24:56 |
| EXPLOITDB | exploitdb_EDB-29421 |
2025-11-11 15:05:37 | 2025-11-11 08:24:56 |
| EXPLOITDB | exploitdb_EDB-29422 |
2025-11-11 15:05:37 | 2025-11-11 08:24:56 |
| EXPLOITDB | exploitdb_EDB-29423 |
2025-11-11 15:05:37 | 2025-11-11 08:24:56 |
| EXPLOITDB | exploitdb_EDB-29424 |
2025-11-11 15:05:37 | 2025-11-11 08:24:56 |
| EXPLOITDB | exploitdb_EDB-29425 |
2025-11-11 15:05:37 | 2025-11-11 08:24:56 |
| EXPLOITDB | exploitdb_EDB-29426 |
2025-11-11 15:05:37 | 2025-11-11 08:24:56 |
| EXPLOITDB | exploitdb_EDB-29427 |
2025-11-11 15:05:37 | 2025-11-11 08:24:56 |
| EXPLOITDB | exploitdb_EDB-29428 |
2025-11-11 15:05:37 | 2025-11-11 08:24:56 |
| EXPLOITDB | exploitdb_EDB-29429 |
2025-11-11 15:05:37 | 2025-11-11 08:24:56 |
| EXPLOITDB | exploitdb_EDB-29430 |
2025-11-11 15:05:37 | 2025-11-11 08:24:56 |
| EXPLOITDB | exploitdb_EDB-29431 |
2025-11-11 15:05:37 | 2025-11-11 08:24:56 |
| EXPLOITDB | exploitdb_EDB-29432 |
2025-11-11 15:05:37 | 2025-11-11 08:24:56 |
| EXPLOITDB | exploitdb_EDB-29433 |
2025-11-11 15:05:37 | 2025-11-11 08:24:56 |
| EXPLOITDB | exploitdb_EDB-29434 |
2025-11-11 15:05:37 | 2025-11-11 08:24:56 |
版本与语言
当前版本:
v31
主要语言:
EN
支持语言:
EN
ZH
其他标识符:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
:
安全公告
暂无安全公告信息
变更历史
v31
EXPLOITDB
2025-11-11 16:24:56
references_count: 87 → 89; tags_count: 30 → 31
查看详细变更
- references_count: 87 -> 89
- tags_count: 30 -> 31
v30
EXPLOITDB
2025-11-11 16:24:56
references_count: 85 → 87; tags_count: 29 → 30
查看详细变更
- references_count: 85 -> 87
- tags_count: 29 -> 30
v29
EXPLOITDB
2025-11-11 16:24:56
references_count: 83 → 85; tags_count: 28 → 29
查看详细变更
- references_count: 83 -> 85
- tags_count: 28 -> 29
v28
EXPLOITDB
2025-11-11 16:24:56
references_count: 81 → 83; tags_count: 27 → 28
查看详细变更
- references_count: 81 -> 83
- tags_count: 27 -> 28
v27
EXPLOITDB
2025-11-11 16:24:56
references_count: 79 → 81; tags_count: 26 → 27
查看详细变更
- references_count: 79 -> 81
- tags_count: 26 -> 27
v26
EXPLOITDB
2025-11-11 16:24:56
references_count: 77 → 79; tags_count: 25 → 26
查看详细变更
- references_count: 77 -> 79
- tags_count: 25 -> 26
v25
EXPLOITDB
2025-11-11 16:24:56
references_count: 75 → 77; tags_count: 24 → 25
查看详细变更
- references_count: 75 -> 77
- tags_count: 24 -> 25
v24
EXPLOITDB
2025-11-11 16:24:56
references_count: 73 → 75; tags_count: 23 → 24
查看详细变更
- references_count: 73 -> 75
- tags_count: 23 -> 24
v23
EXPLOITDB
2025-11-11 16:24:56
references_count: 71 → 73; tags_count: 22 → 23
查看详细变更
- references_count: 71 -> 73
- tags_count: 22 -> 23
v22
EXPLOITDB
2025-11-11 16:24:56
references_count: 69 → 71; tags_count: 21 → 22
查看详细变更
- references_count: 69 -> 71
- tags_count: 21 -> 22
v21
EXPLOITDB
2025-11-11 16:24:56
references_count: 67 → 69; tags_count: 20 → 21
查看详细变更
- references_count: 67 -> 69
- tags_count: 20 -> 21
v20
EXPLOITDB
2025-11-11 16:24:56
references_count: 65 → 67; tags_count: 19 → 20
查看详细变更
- references_count: 65 -> 67
- tags_count: 19 -> 20
v19
EXPLOITDB
2025-11-11 16:24:56
references_count: 63 → 65; tags_count: 18 → 19
查看详细变更
- references_count: 63 -> 65
- tags_count: 18 -> 19
v18
EXPLOITDB
2025-11-11 16:24:56
references_count: 61 → 63; tags_count: 17 → 18
查看详细变更
- references_count: 61 -> 63
- tags_count: 17 -> 18
v17
EXPLOITDB
2025-11-11 16:24:56
references_count: 59 → 61; tags_count: 16 → 17
查看详细变更
- references_count: 59 -> 61
- tags_count: 16 -> 17
v16
EXPLOITDB
2025-11-11 16:24:56
references_count: 57 → 59; tags_count: 15 → 16
查看详细变更
- references_count: 57 -> 59
- tags_count: 15 -> 16
v15
EXPLOITDB
2025-11-11 16:24:56
references_count: 55 → 57; tags_count: 14 → 15
查看详细变更
- references_count: 55 -> 57
- tags_count: 14 -> 15
v14
EXPLOITDB
2025-11-11 16:24:56
references_count: 53 → 55; tags_count: 13 → 14
查看详细变更
- references_count: 53 -> 55
- tags_count: 13 -> 14
v13
EXPLOITDB
2025-11-11 16:24:56
references_count: 51 → 53; tags_count: 12 → 13
查看详细变更
- references_count: 51 -> 53
- tags_count: 12 -> 13
v12
EXPLOITDB
2025-11-11 16:24:56
references_count: 49 → 51; tags_count: 11 → 12
查看详细变更
- references_count: 49 -> 51
- tags_count: 11 -> 12
v11
EXPLOITDB
2025-11-11 16:24:56
references_count: 47 → 49; tags_count: 10 → 11
查看详细变更
- references_count: 47 -> 49
- tags_count: 10 -> 11
v10
EXPLOITDB
2025-11-11 16:24:56
references_count: 45 → 47; tags_count: 9 → 10
查看详细变更
- references_count: 45 -> 47
- tags_count: 9 -> 10
v9
EXPLOITDB
2025-11-11 16:24:56
references_count: 43 → 45; tags_count: 8 → 9
查看详细变更
- references_count: 43 -> 45
- tags_count: 8 -> 9
v8
EXPLOITDB
2025-11-11 16:24:56
references_count: 41 → 43; tags_count: 7 → 8
查看详细变更
- references_count: 41 -> 43
- tags_count: 7 -> 8
v7
EXPLOITDB
2025-11-11 16:24:56
references_count: 39 → 41; tags_count: 6 → 7
查看详细变更
- references_count: 39 -> 41
- tags_count: 6 -> 7
v6
EXPLOITDB
2025-11-11 16:24:56
references_count: 37 → 39; tags_count: 5 → 6
查看详细变更
- references_count: 37 -> 39
- tags_count: 5 -> 6
v5
EXPLOITDB
2025-11-11 16:24:56
references_count: 35 → 37; tags_count: 4 → 5
查看详细变更
- references_count: 35 -> 37
- tags_count: 4 -> 5
v4
EXPLOITDB
2025-11-11 16:24:56
references_count: 32 → 35; tags_count: 0 → 4; data_sources: ['cnnvd', 'cve', 'nvd'] → ['cnnvd', 'cve', 'exploitdb', 'nvd']
查看详细变更
- references_count: 32 -> 35
- tags_count: 0 -> 4
- data_sources: ['cnnvd', 'cve', 'nvd'] -> ['cnnvd', 'cve', 'exploitdb', 'nvd']
v3
CNNVD
2025-11-11 15:49:13
vulnerability_type: 未提取 → 授权问题; cnnvd_id: 未提取 → CNNVD-200701-174; data_sources: ['cve', 'nvd'] → ['cnnvd', 'cve', 'nvd']
查看详细变更
- vulnerability_type: 未提取 -> 授权问题
- cnnvd_id: 未提取 -> CNNVD-200701-174
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
v2
NVD
2025-11-11 15:41:26
severity: SeverityLevel.MEDIUM → SeverityLevel.HIGH; cvss_score: 未提取 → 7.5; cvss_vector: NOT_EXTRACTED → AV:N/AC:L/Au:N/C:P/I:P/A:P; cvss_version: NOT_EXTRACTED → 2.0; affected_products_count: 0 → 1; data_sources: ['cve'] → ['cve', 'nvd']
查看详细变更
- severity: SeverityLevel.MEDIUM -> SeverityLevel.HIGH
- cvss_score: 未提取 -> 7.5
- cvss_vector: NOT_EXTRACTED -> AV:N/AC:L/Au:N/C:P/I:P/A:P
- cvss_version: NOT_EXTRACTED -> 2.0
- affected_products_count: 0 -> 1
- data_sources: ['cve'] -> ['cve', 'nvd']