← Database

CVE-2007-1073

CRITICAL CVSS: 10.0 Published: 2007-02-22 Modified: 2026-06-16

Description

Static code injection vulnerability in install.php in mcRefer allows remote attackers to execute arbitrary PHP code via the bgcolor parameter, which is inserted into mcrconf.inc.php.

Affected Platforms

Mcrefer Mcrefer

Weakness Type

NVD-CWE-Other

References