CVE-2007-0491

Sky GUNNING MySpeach <3.0.6 - RCE

Title source: llm

Description

PHP remote file inclusion vulnerability in up.php in Sky GUNNING MySpeach 3.0.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the my_ms[root] parameter, a different vector than CVE-2006-4630. NOTE: Some of these details are obtained from third party information.

Exploits (1)

exploitdb WORKING POC
webappsphp
https://www.exploit-db.com/exploits/3165

References (2)

Scores

EPSS 0.0462
EPSS Percentile 89.3%

Details

Status published
Products (1)
sky_gunning/myspeach < 3.0.6
Published Jan 25, 2007
Tracked Since Feb 18, 2026