CVE-2007-2326

HYIP Manager Pro - Remote File Inclusion via Plugin File Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-2326. PoCs published by alijsb.

AI-analyzed exploit summary The provided text describes a remote file inclusion vulnerability in HYIP Manager Pro due to insufficient sanitization of user-supplied data. It includes a sample exploit URL but lacks executable code.

Description

Multiple PHP remote file inclusion vulnerabilities in HYIP Manager Pro allow remote attackers to execute arbitrary PHP code via a URL in the plugin_file parameter to (1) Smarty.class.php and (2) Smarty_Compiler.class.php in inc/libs/; (3) core.display_debug_console.php, (4) core.load_plugins.php, (5) core.load_resource_plugin.php, (6) core.process_cached_inserts.php, (7) core.process_compiled_include.php, and (8) core.read_cache_file.php in inc/libs/core/; and other unspecified files. NOTE: (1) and (2) might be incorrectly reported vectors in Smarty.

Exploits (1)

exploitdb WRITEUP VERIFIED
by alijsb · textwebappsphp
https://www.exploit-db.com/exploits/29909

The provided text describes a remote file inclusion vulnerability in HYIP Manager Pro due to insufficient sanitization of user-supplied data. It includes a sample exploit URL but lacks executable code.

Classification
Writeup 80%
Attack Type
Rce
Complexity
Trivial
Reliability
Theoretical
Target: HYIP Manager Pro
No auth needed
Prerequisites: Network access to the target application
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/2634
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/33882
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/466837/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/23663

Scores

EPSS 0.0298
EPSS Percentile 85.5%

Details

Status published
Products (1)
goldcoders/hyip_manager_pro
Published Apr 27, 2007
Tracked Since Feb 18, 2026