{
  "schema_version": "1.4.0",
  "id": "GHSA-hcvp-v464-6hvj",
  "modified": "2022-05-01T17:42:17Z",
  "published": "2022-05-01T17:42:17Z",
  "aliases": [
    "CVE-2007-0182"
  ],
  "details": "Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbitrary PHP code via a URL in the _config[site_path] parameter to (1) admin_password.php, (2) add_welcome_text.php, (3) admin_email.php, (4) add_templates.php, (5) admin_paypal_email.php, (6) approve_member.php, (7) delete_member.php, (8) index.php, (9) list_members.php, (10) membership_pricing.php, or (11) send_email.php in admin/; (12) config.php or (13) db_config.php in include/; or (14) add_category.php, (15) add_news.php, (16) change_catalog_template.php, (17) couple_milestone.php, (18) couple_profile.php, (19) delete_category.php, (20) index.php, (21) login.php, (22) logout.php, (23) register.php, (24) upload_photo.php, (25) user_catelog_password.php, (26) user_email.php, (27) user_extend.php, or (28) user_membership_password.php in user/.  NOTE: the include/common_function.php vector is already covered by another candidate from the same date.",
  "severity": [],
  "affected": [],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-0182"
    },
    {
      "type": "WEB",
      "url": "http://securityreason.com/securityalert/2136"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/32668"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/33411"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/33412"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/33413"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/33414"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/33415"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/33416"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/33417"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/33418"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/33419"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/33420"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/33421"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/33422"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/33423"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/33425"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/33426"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/33427"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/33428"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/33429"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/33430"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/33431"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/33432"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/33433"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/33434"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/33435"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/33436"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/33437"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/33438"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/33439"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/456389/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/21965"
    }
  ],
  "database_specific": {
    "cwe_ids": [],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2007-01-12T05:04:00Z"
  }
}