CVE-2007-3371
PHP remote file inclusion vulnerability in plugins/widgets/htmledit/htmledit.php in Powl 0.94 allows remote attackers to execute arbitrary PHP code via a URL…
published June 22, 2007
Patch now
High probability of exploitation
NVD has not assigned a CVSS score to this record. It sits in the 99.4th percentile for exploit probability.
What it is
PHP remote file inclusion vulnerability in plugins/widgets/htmledit/htmledit.php in Powl 0.94 allows remote attackers to execute arbitrary PHP code via a URL in the _POWL[installPath] parameter.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.71184 · 99.4th percentile
- Published
- 2007-06-22T18:00Z
EPSS history
Timeline