CVE-2007-2751
PHPGlossar 0.8 - Remote File Inclusion via format_menue Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-2751. PoCs published by kezzap66345.
AI-analyzed exploit summary This is a writeup describing a Remote File Inclusion (RFI) vulnerability in PHPGlossar Version 0.8. It identifies vulnerable files and parameters but does not include functional exploit code.
Description
Multiple PHP remote file inclusion vulnerabilities in PHPGlossar 0.8 allow remote attackers to execute arbitrary PHP code via a URL in the format_menue parameter to (1) admin/inc/change_action.php or (2) admin/inc/add.php.
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by kezzap66345 · textwebappsphp
https://www.exploit-db.com/exploits/3941
This is a writeup describing a Remote File Inclusion (RFI) vulnerability in PHPGlossar Version 0.8. It identifies vulnerable files and parameters but does not include functional exploit code.
Classification
Writeup 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Theoretical
Target:
PHPGlossar Version 0.8
No auth needed
Prerequisites:
A vulnerable installation of PHPGlossar Version 0.8 · Ability to send HTTP requests to the target server
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (6)
Core 6
Core References
Exploit, Third Party Advisory exploit
x_refsource_exploit-db
https://www.exploit-db.com/exploits/3941
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2007/1855
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/37925
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/24024
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/37926
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/34357
Scores
EPSS
0.0328
EPSS Percentile
86.8%
Details
Status
published
Products (1)
phpglossar/phpglossar
0.8
Published
May 17, 2007
Tracked Since
Feb 18, 2026