CVE-2007-5565

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-10-18 · updated 2026-06-16
Weakness: CWE-94

Description

PHP remote file inclusion vulnerability in includes/functions.php in phpSCMS 0.0.1-Alpha1 allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. NOTE: this issue is disputed by CVE because the identified code is in a function that is not accessible via direct request

Affected products

Phpscms: 0.0.1-alpha1

References

http://arfis.wordpress.com/2007/09/13/rfi-02-phpscms/
http://arfis.wordpress.com/2007/09/13/rfi-02-phpscms/

Get alerted when CVE-2007-5565 or the next vulnerability affects your stack