CVE-2007-2368

WebSPELL <4.01.02 - Info Disclosure

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-2368. PoCs published by Trex.

AI-analyzed exploit summary The code describes two file disclosure vulnerabilities in WebSPELL <= 4.01.02 via the 'picture.php' script. Vulnerability 1 requires 'register_globals' to be enabled, while Vulnerability 2 relies on PHP versions < 4.3.0. Both allow arbitrary file reads via path traversal.

Description

picture.php in WebSPELL 4.01.02 and earlier allows remote attackers to read arbitrary files via the file parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Trex · textwebappsphp
https://www.exploit-db.com/exploits/3673

The code describes two file disclosure vulnerabilities in WebSPELL <= 4.01.02 via the 'picture.php' script. Vulnerability 1 requires 'register_globals' to be enabled, while Vulnerability 2 relies on PHP versions < 4.3.0. Both allow arbitrary file reads via path traversal.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: WebSPELL <= 4.01.02
No auth needed
Prerequisites: PHP register_globals enabled (Vulnerability 1) · PHP version < 4.3.0 (Vulnerability 2)
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (2)

Core 2
Core References
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/1274
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/3673

Scores

EPSS 0.0229
EPSS Percentile 81.0%

Details

Status published
Products (1)
webspell/webspell < 4.01.02
Published Apr 30, 2007
Tracked Since Feb 18, 2026