CVE-2007-5165

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-10-01 · updated 2026-06-16
Weakness: CWE-94

Description

PHP remote file inclusion vulnerability in init.php in Jens Tkotz myIpacNG-stats (MINGS) 0.05 allows remote attackers to execute arbitrary PHP code via a URL in the MINGS_BASE parameter. NOTE: this issue is disputed by CVE because MINGS_BASE is defined before use

Affected products

Myipacng-Stats: 0.05

References

http://arfis.wordpress.com/2007/09/14/rfi-02-myipacng-stats/
http://osvdb.org/41058
http://arfis.wordpress.com/2007/09/14/rfi-02-myipacng-stats/
http://osvdb.org/41058

Get alerted when CVE-2007-5165 or the next vulnerability affects your stack