CVE-2007-0635

Multiple PHP remote file inclusion vulnerabilities in EncapsCMS 0.3.6 allow remote attackers to execute arbitrary PHP code via a URL in the (1) config[path]…

published January 31, 2007

CVSS
—
EPSS
9%
Percentile
95.3
In the wild
Unconfirmed
What it is

Multiple PHP remote file inclusion vulnerabilities in EncapsCMS 0.3.6 allow remote attackers to execute arbitrary PHP code via a URL in the (1) config[path] parameter to (a) common_foot.php or (b) blogs.php, or (2) the config[theme] parameter to (c) admin/gallery_head.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09268 · 95.3th percentile
Published
2007-01-31T21:00Z
EPSS history
Timeline
  • 31 JAN 21:00Z
    Multiple PHP remote file inclusion vulnerabilities in EncapsCMS 0.3.6 allow remote attackers to execute arbitrary PHP code via a URL in the (1) config[path]…
    cvelistv5