CVE-2007-1908

PHP file inclusion vulnerability in php121db.php in PHP121 Instant Messenger 2.2 allows remote attackers to execute arbitrary PHP code via a UNC share pathname…

published April 10, 2007

CVSS
—
EPSS
3%
Percentile
87.7
In the wild
Unconfirmed
What it is

PHP file inclusion vulnerability in php121db.php in PHP121 Instant Messenger 2.2 allows remote attackers to execute arbitrary PHP code via a UNC share pathname or a local file pathname in the php121dir parameter, which is accessed by the file_exists function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03121 · 87.7th percentile
Published
2007-04-10T23:00Z
EPSS history
Timeline
  • 10 APR 23:00Z
    PHP file inclusion vulnerability in php121db.php in PHP121 Instant Messenger 2.2 allows remote attackers to execute arbitrary PHP code via a UNC share pathname…
    cvelistv5