CVEs-PoC/2007/CVE-2007-1513.md

CVE-2007-1513

Description

PHP remote file inclusion vulnerability in comanda.php in GraFX Company WebSite Builder (CWB) PRO 1.9.8, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the INCLUDE_PATH parameter.

POC

Reference

• http://securityreason.com/securityalert/2452
• http://securityreason.com/securityalert/2452
• https://www.exploit-db.com/exploits/3485
• https://www.exploit-db.com/exploits/3485

Github

No PoCs found on GitHub currently.