CVE-2007-2485
PHP remote file inclusion vulnerability in myflash-button.php in the myflash 1.00 and earlier plugin for WordPress allows remote attackers to execute arbitrary…
published May 3, 2007
Patch now
High probability of exploitation
NVD has not assigned a CVSS score to this record. It sits in the 99.0th percentile for exploit probability.
What it is
PHP remote file inclusion vulnerability in myflash-button.php in the myflash 1.00 and earlier plugin for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the wpPATH parameter.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.54853 · 99.0th percentile
- Published
- 2007-05-03T17:00Z
EPSS history
Timeline