CVE-2007-5418 - CVE House
Back to Database
Status published High CVE-2007-5418

Multiple PHP remote file inclusion vulnerabilities in CARE2X 2G 2.2...

Vulnerability Description

Multiple PHP remote file inclusion vulnerabilities in CARE2X 2G 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the root_path parameter to (1) en_copyrite.php, (2) vi_copyrite.php, and (3) ar_copyrite.php in language/ directories; (4) class_access.php, (5) class_department.php, (6) class_config.php, (7) class_image.php, (8) class_ward.php, and (9) class_product.php in include/care_api_classes/; (10) gui/smarty_template/smarty_care.class.php; and possibly other components, different vectors than CVE-2007-1458.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-5418

Credits & Attribution

No credits recorded in the NVD database.

References

More from care2x

View All →
CVE-2021-36352
Stored cross-site scripting (XSS) vulnerability in Care2x Hospital Information Management...
Medium 5.4
CVE-2021-36351
SQL Injection Vulnerability in Care2x Open Source Hospital Information Management...
Critical 9.8
CVE-2019-25728
Care2x 2.7 Hospital Information System SQL Injection via ck_config
High 8.8
CVE-2007-1574
CARE2X 2.2, and possibly earlier, allows remote attackers to obtain...
Medium 5
CVE-2007-1458
Multiple PHP remote file inclusion vulnerabilities in CARE2X 1.1 allow...
Medium 6.8

Affected Vendor

Affected Software

2g
Vulnerable Versions:
2.2

Timeline

Official Publish: October 12th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.