CVEs-PoC/2007/CVE-2007-1968.md

CVE-2007-1968

Description

PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0 through 1.6, allows remote attackers to execute arbitrary PHP code via a URL in the scoreid parameter.

POC

Reference

• http://securityreason.com/securityalert/2548
• http://securityreason.com/securityalert/2548
• https://www.exploit-db.com/exploits/3685
• https://www.exploit-db.com/exploits/3685

Github

No PoCs found on GitHub currently.