CVE-2007-1153

CuteNews 1.3.6 - Remote Code Execution via PHP File Inclusion

Title source: llm
STIX 2.1

Description

Multiple PHP remote file inclusion vulnerabilities in CutePHP CuteNews 1.3.6 allow remote attackers to execute arbitrary PHP code via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: issue might overlap CVE-2004-1660 or CVE-2006-4445.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/22674
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/37397

Scores

EPSS 0.0121
EPSS Percentile 64.7%

Details

CWE
CWE-94
Status published
Products (1)
cutephp/cutenews 1.3.6
Published Mar 02, 2007
Tracked Since Feb 18, 2026