Cybozu Labs: >> Musoo >> 0.21 Security Vulnerabilities
Multiple PHP remote file inclusion vulnerabilities in Musoo 0.21 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[ini_array][EXTLIB_PATH] parameter to (1) msDb.php, (2) modules/MusooTemplateLite.php, or (3) modules/SoundImporter.php.
CVSS Score
7.5
EPSS Score
0.09
Published
2007-06-20