CVE-2007-4101

Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote attackers to execute arbitrary PHP code via the Madoa parameter to (1) index.php, (2) vote.php, and (3) admin.php.

🔗 References (14)

• cve@mitrehttp://osvdb.org/37262
• cve@mitrehttp://osvdb.org/37263
• cve@mitrehttp://osvdb.org/37264
• cve@mitrehttp://securityreason.com/securityalert/2937
• cve@mitrehttp://www.attrition.org/pipermail/vim/2007-July/001739.html
• cve@mitrehttp://www.securityfocus.com/archive/1/475096/100/0/threaded
• cve@mitrehttp://www.securityfocus.com/bid/25138
• af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/37262
• af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/37263
• af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/37264
• af854a3a-2127-422b-91ae-364da2661108http://securityreason.com/securityalert/2937
• af854a3a-2127-422b-91ae-364da2661108http://www.attrition.org/pipermail/vim/2007-July/001739.html
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/475096/100/0/threaded
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/25138