CVE-2007-4818

Multiple PHP remote file inclusion vulnerabilities in Txx CMS 0.2 allow remote attackers to execute arbitrary PHP code via a URL in the doc_root parameter to…

published September 11, 2007

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.0th percentile for exploit probability.

CVSS

—

EPSS

56%

Percentile

99.0

In the wild

Unconfirmed

What it is

Multiple PHP remote file inclusion vulnerabilities in Txx CMS 0.2 allow remote attackers to execute arbitrary PHP code via a URL in the doc_root parameter to (1) addons/plugin.php, (2) addons/sidebar.php, (3) mail/index.php, or (4) mail/mailbox.php in modules/.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.55541 · 99.0th percentile
Published: 2007-09-11T19:00Z

EPSS history

Timeline

11 SEP 19:00Z
Multiple PHP remote file inclusion vulnerabilities in Txx CMS 0.2 allow remote attackers to execute arbitrary PHP code via a URL in the doc_root parameter to…
cvelistv5