CVEs-PoC/2007/CVE-2007-2411.md

CVE-2007-2411

Description

PHP remote file inclusion vulnerability in index.php in Sphider 1.2.x allows remote attackers to execute arbitrary PHP code via a URL in the include_dir parameter. NOTE: a third party disputes this vulnerability, stating that "the application is not vulnerable to this issue.

POC

Reference

• http://securityreason.com/securityalert/2648

Github

No PoCs found on GitHub currently.