VULNERABILITY INTELLIGENCE
CVE-2007-2260
CVSS score7.5 HIGH
EPSS probability2.46%
CISA KEVNot currently listed
Published2007-04-25
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple PHP remote file inclusion vulnerabilities in bibtex mase beta 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the bibtexrootrel parameter to (1) unavailable.php, (2) source.php, (3) log.php, (4) latex.php, (5) indexinfo.php, (6) index.php, (7) importinfo.php, (8) import.php, (9) examplefile.php, (10) clearinfo.php, (11) clear.php, (12) aboutinfo.php, (13) about.php, and other unspecified files.
Weakness classification
- CWE-94: Improper Control of Generation of Code ('Code Injection')