CVE-2007-2301

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-04-26 · updated 2026-06-16

Description

Multiple PHP remote file inclusion vulnerabilities in audioCMS arash 0.1.4 allow remote attackers to execute arbitrary PHP code via a URL in the arashlib_dir parameter to (1) edit.inc.php and (2) list_features.inc.php in arash_lib/include, and (3) arash_gadmin.class.php and (4) arash_sadmin.class.php in arash_lib/class/.

Affected products

Arash Audiocms: 0.1.4

References

http://www.securityfocus.com/bid/23496
http://www.vupen.com/english/advisories/2007/1396
https://www.exploit-db.com/exploits/3744
http://www.securityfocus.com/bid/23496
http://www.vupen.com/english/advisories/2007/1396
https://www.exploit-db.com/exploits/3744

Get alerted when CVE-2007-2301 or the next vulnerability affects your stack