CVE-2007-2628
Justin Koivisto SecurityAdmin <4.0.2 - RCE
Title source: llmDescription
PHP remote file inclusion vulnerability in include/logout.php in Justin Koivisto SecurityAdmin for PHP (aka PHPSecurityAdmin, PSA) 4.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the PSA_PATH parameter.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by ilker Kandemir · perlwebappsphp
https://www.exploit-db.com/exploits/29944
References (5)
Scores
EPSS
0.0315
EPSS Percentile
86.9%
Details
Status
published
Products (1)
justin_koivisto/phpsecurityadmin
4.0.2
Published
May 11, 2007
Tracked Since
Feb 18, 2026