CVE-2007-1855

Multiple PHP remote file inclusion vulnerabilities in smarty/smarty_class.php in Shop-Script FREE allow remote attackers to execute arbitrary PHP code via a…

published April 3, 2007

CVSS
—
EPSS
1%
Percentile
71.3
In the wild
Unconfirmed
What it is

Multiple PHP remote file inclusion vulnerabilities in smarty/smarty_class.php in Shop-Script FREE allow remote attackers to execute arbitrary PHP code via a URL in the (1) _smarty_compile_path, (2) smarty_compile_path, (3) get_plugin_filepath, (4) smarty_dir, and (5) filename parameters. NOTE: this issue might be related to CVE-2006-7105.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01356 · 71.3th percentile
Published
2007-04-03T16:00Z
EPSS history
Timeline
  • 03 APR 16:00Z
    Multiple PHP remote file inclusion vulnerabilities in smarty/smarty_class.php in Shop-Script FREE allow remote attackers to execute arbitrary PHP code via a…
    cvelistv5