CVE-2007-2156

rezervi_generic < 0.9 - Remote File Inclusion via root Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-2156. PoCs published by GoLd_M.

AI-analyzed exploit summary This is a writeup describing multiple remote file inclusion vulnerabilities in Rezervi Generic 0.9. It lists several exploitable paths but does not include actual exploit code or payloads.

Description

Multiple PHP remote file inclusion vulnerabilities in Rezervi Generic 0.9 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to (1) datumVonDatumBis.inc.php, (2) footer.inc.php, (3) header.inc.php, and (4) stylesheets.php in templates/; and (5) wochenuebersicht.inc.php, (6) monatsuebersicht.inc.php, (7) jahresuebersicht.inc.php, and (8) tagesuebersicht.inc.php in belegungsplan/.

Exploits (1)

exploitdb WRITEUP VERIFIED
by GoLd_M · textwebappsphp
https://www.exploit-db.com/exploits/3763

This is a writeup describing multiple remote file inclusion vulnerabilities in Rezervi Generic 0.9. It lists several exploitable paths but does not include actual exploit code or payloads.

Classification
Writeup 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Theoretical
Target: Rezervi Generic 0.9
No auth needed
Prerequisites: network access to the target application · ability to craft malicious URLs with remote file inclusion payloads
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (13)

Core 13
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/33737
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/35006
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/35009
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/23550
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/35007
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/3763
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/35008
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/35013
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/35011
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/35010
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24926
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/35012
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/1448

Scores

EPSS 0.1010
EPSS Percentile 95.0%

Details

Status published
Products (1)
rezervi_generic/rezervi_generic < 0.9
Published Apr 19, 2007
Tracked Since Feb 18, 2026