Skip to main content
← All vulnerabilities
CVE-2007-1571

PHP remote file inclusion vulnerability in includes/base.php in Radical Designs Activist Mobilization Platform (AMP) 3.2, when register_glob

Published
Last modified
published
Not listed in CISA KEV
1 on Exploit-DB

Summary

PHP remote file inclusion vulnerability in includes/base.php in Radical Designs Activist Mobilization Platform (AMP) 3.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the base_path parameter.

Timeline

  1. Public exploit on Exploit-DB

    EDB-3471

  2. CVE published
  3. Record last updated

Affected versions

  • n/a n/a

    Version range not reported

References 5

securityfocus.com

exchange.xforce.ibmcloud.com

vupen.com

advisories.echo.or.id

Exploit-DB