CVE-2007-5573
PHP remote file inclusion vulnerability in classes/core/language.php in LimeSurvey 1.5.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter.
- Affected products
- Limesurvey
- Limesurvey
- ≤ 1.5.2
- Fix
- Available
- CVSS 2.0
- 6.8 MEDIUM
- EPSS
- 2.6% (84th percentile)
- Weakness
- CWE-94
- NVD status
- Modified
- Published
- 2007-10-18
CVE-2007-5573 at NVD
1 known exploit for CVE-2007-5573
Proof-of-concept code and exploit modules indexed by Sploitus