CVE-2007-5185

Multiple PHP remote file inclusion vulnerabilities in phpWCMS XT 0.0.7 BETA and earlier allow remote attackers to execute arbitrary PHP code via a URL in the…

published October 3, 2007

CVSS

—

EPSS

42%

Percentile

98.7

In the wild

Unconfirmed

What it is

Multiple PHP remote file inclusion vulnerabilities in phpWCMS XT 0.0.7 BETA and earlier allow remote attackers to execute arbitrary PHP code via a URL in the HTML_MENU_DirPath parameter to (1) config_HTML_MENU.php and (2) config_PHPLM.php in phpwcms_template/inc_script/frontend_render/navigation/.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.42285 · 98.7th percentile
Published: 2007-10-03T14:00Z

EPSS history

Timeline

03 OCT 14:00Z
Multiple PHP remote file inclusion vulnerabilities in phpWCMS XT 0.0.7 BETA and earlier allow remote attackers to execute arbitrary PHP code via a URL in the…
cvelistv5