← Database

CVE-2007-6082

CRITICAL CVSS: 9.3 Published: 2007-11-22 Modified: 2026-06-16

Description

Direct static code injection vulnerability in acp/savenews.php in Sciurus Hosting Panel, possibly 2.0.3, allows remote attackers to inject arbitrary PHP code via the filecontents parameter, which can be executed by accessing includes/news.php.

Affected Platforms

Sciurus Sciurus Hosting Panel

Weakness Type

CWE-94

References