CVE-2007-1299
Mani Stats Reader <= 1.2 - Remote File Inclusion via index.php ipath Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-1299. PoCs published by mozi.
AI-analyzed exploit summary This is a writeup describing a remote file inclusion (RFI) vulnerability in Mani Admin Plugin Stats Reader V1.2. It provides a Google dork and a vulnerable parameter for exploitation but lacks actual exploit code.
Description
PHP remote file inclusion vulnerability in index.php in Mani Stats Reader 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ipath parameter.
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by mozi · textwebappsphp
https://www.exploit-db.com/exploits/3398
This is a writeup describing a remote file inclusion (RFI) vulnerability in Mani Admin Plugin Stats Reader V1.2. It provides a Google dork and a vulnerable parameter for exploitation but lacks actual exploit code.
Classification
Writeup 80%
Attack Type
Rce
Complexity
Trivial
Reliability
Theoretical
Target:
Mani Admin Plugin Stats Reader V1.2
No auth needed
Prerequisites:
A vulnerable version of Mani Admin Plugin Stats Reader · Remote file inclusion (RFI) setup or malicious file hosting
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/32782
Exploit, Third Party Advisory exploit
x_refsource_exploit-db
https://www.exploit-db.com/exploits/3398
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24394
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/33870
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/22794
Scores
EPSS
0.0267
EPSS Percentile
83.8%
Details
Status
published
Products (1)
mani_stats_reader/mani_stats_reader
1.2
Published
Mar 07, 2007
Tracked Since
Feb 18, 2026