CVE-2007-0861

PHP remote file inclusion vulnerability in modules/mail/index.php in phpCOIN RC-1 and earlier allows remote attackers to execute arbitrary PHP code via a URL…

published February 9, 2007

CVSS
—
EPSS
2%
Percentile
82.4
In the wild
Unconfirmed
What it is

PHP remote file inclusion vulnerability in modules/mail/index.php in phpCOIN RC-1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the _CCFG['_PKG_PATH_MDLS'] parameter. NOTE: this issue has been disputed by a reliable third party, who states that a fatal error occurs before the relevant code is reached

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02204 · 82.4th percentile
Published
2007-02-09T01:00Z
EPSS history
Timeline
  • 09 FEB 01:00Z
    PHP remote file inclusion vulnerability in modules/mail/index.php in phpCOIN RC-1 and earlier allows remote attackers to execute arbitrary PHP code via a URL…
    cvelistv5