Intrusion PreventionCARE2X.Remote.File.Inclusion
Description
It indicates a possible exploit of a PHP remote file inclusion vulnerability in CARE2X.
This flaw is due to input validation errors in "include/inc_news_save.php" when processing the "root_path" parameter.
Affected Products
CARE2X version 2.2.2 and prior.
Impact
The execution of arbitrary PHP code on the system.
Recommended Actions
Currently we are not aware of any official supplied fix for this issue.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2020-12-11 | 16.978 |
| ID | 14411 |
| Created | Mar 28, 2007 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2007-1458 |
| Exploit Prediction Score | 28.6% |
| Default Action | pass |
| Active | |
| Affected OS | Windows, Linux, BSD, Solaris, MacOS |
| Affected App | PHP_app |