CVEvulnerability

CVE-2007-3228

6.8 MEDIUM Published 2007-06-14 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-06-14
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P

Description

PHP remote file inclusion vulnerability in saf/lib/PEAR/PhpDocumentor/Documentation/tests/bug-559668.php in Sitellite CMS 4.2.12 and earlier might allow remote attackers to execute arbitrary PHP code via a URL in the FORUM[LIB] parameter. NOTE: by default, access to the PhpDocumentor directory tree is blocked by .htaccess.

Affected configurations

• simian systems inc sitellite cms 4.2.12

References