CVE-2007-4525

PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelette_cache…

published August 25, 2007

CVSS
—
EPSS
2%
Percentile
75.6
In the wild
Unconfirmed
What it is

PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelette_cache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the squelette_cache variable is initialized before use, and is only used within the scope of a function

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01600 · 75.6th percentile
Published
2007-08-25T00:00Z
EPSS history
Timeline
  • 25 AUG 00:00Z
    PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelette_cache…
    cvelistv5