CVE-2007-3141

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-06-11 · updated 2026-06-16

Description

PHP remote file inclusion vulnerability in core/editor.php in phpWebThings 1.5.2 allows remote attackers to execute arbitrary PHP code via a URL in the editor_insert_top parameter. NOTE: the editor_insert_bottom vector is already covered by CVE-2006-6042.

Affected products

Phpwebthings: 1.5.2

References

http://securityreason.com/securityalert/2786
http://www.securityfocus.com/archive/1/470794/100/0/threaded
http://securityreason.com/securityalert/2786
http://www.securityfocus.com/archive/1/470794/100/0/threaded

Get alerted when CVE-2007-3141 or the next vulnerability affects your stack