CVE-2007-2273

Alessandro Lulli wavewoo 0.1.1 - RCE

Title source: llm

Description

PHP remote file inclusion vulnerability in include/loading.php in Alessandro Lulli wavewoo 0.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the path_include parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by kezzap66345 · htmlwebappsphp

https://www.exploit-db.com/exploits/3796

View Code ZIP pw:eip

References (6)

[Third Party Advisory] http://www.vupen.com/english/advisories/2007/1528

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/3796

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/23636

[Third Party Advisory, VDB Entry] http://osvdb.org/35319

[Vendor Advisory] http://secunia.com/advisories/25015

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/33865

Scores

EPSS 0.1165

EPSS Percentile 93.7%

Details

Status published

Products (1)

alessandro_lulli/wavewoo 0.1.1

Published Apr 25, 2007

Tracked Since Feb 18, 2026