← Database

CVE-2007-1787

CRITICAL CVSS: 9.3 Published: 2007-03-31 Modified: 2026-06-16

Description

Multiple PHP remote file inclusion vulnerabilities in lib/timesheet.class.php in Softerra Time-Assistant 6.2 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) inc_dir or (2) lib_dir parameter.

Affected Platforms

Softerra Time-Assistant

Weakness Type

NVD-CWE-Other

References