CVE-2007-1525

Direct static code injection vulnerability in postpost.php in Dayfox Blog (dfblog) 4 allows remote attackers to execute arbitrary PHP code via the cat…

published March 20, 2007

CVSS

—

EPSS

38%

Percentile

98.5

In the wild

Unconfirmed

What it is

Direct static code injection vulnerability in postpost.php in Dayfox Blog (dfblog) 4 allows remote attackers to execute arbitrary PHP code via the cat parameter, which can be executed via a request to posts.php.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.37930 · 98.5th percentile
Published: 2007-03-20T20:00Z

EPSS history

Timeline

20 MAR 20:00Z
Direct static code injection vulnerability in postpost.php in Dayfox Blog (dfblog) 4 allows remote attackers to execute arbitrary PHP code via the cat…
cvelistv5