CVE-2007-3306 Information

Description

PHP remote file inclusion vulnerability in crontab/run_billing.php in MiniBill 1.2.5 allows remote attackers to execute arbitrary PHP code via a URL in the config[include_dir] parameter a different vector than CVE-2006-4489.

Reference

http://osvdb.org/38465 https://exchange.xforce.ibmcloud.com/vulnerabilities/34919 https://www.exploit-db.com/exploits/4079

Share on: