CVE-2007-4950

PHP remote file inclusion vulnerability in form/db_form/employee.php in PHPortal 0.2.7 allows remote attackers to execute arbitrary PHP code via a URL in the…

published September 18, 2007

CVSS
—
EPSS
1%
Percentile
68.2
In the wild
Unconfirmed
What it is

PHP remote file inclusion vulnerability in form/db_form/employee.php in PHPortal 0.2.7 allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter. NOTE: this issue is disputed by CVE, since DOCUMENT_ROOT cannot be modified by an attacker

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01217 · 68.2th percentile
Published
2007-09-18T20:00Z
EPSS history
Timeline
  • 18 SEP 20:00Z
    PHP remote file inclusion vulnerability in form/db_form/employee.php in PHPortal 0.2.7 allows remote attackers to execute arbitrary PHP code via a URL in the…
    cvelistv5