Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-2940. PoCs published by Mehmet Ince.
AI-analyzed exploit summary This is a writeup describing a remote file inclusion (RFI) vulnerability in FlaP v1.0 Beta. It identifies vulnerable parameters in specific PHP files but does not include executable exploit code.
Description
Multiple PHP remote file inclusion vulnerabilities in FlaP 1.0b (1.0 Beta) allow remote attackers to execute arbitrary PHP code via a URL in the pachtofile parameter to (1) skin/html/table.php or (2) login.php.
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by Mehmet Ince · textwebappsphp
https://www.exploit-db.com/exploits/3992
This is a writeup describing a remote file inclusion (RFI) vulnerability in FlaP v1.0 Beta. It identifies vulnerable parameters in specific PHP files but does not include executable exploit code.
Classification
Writeup 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Theoretical
Target:
FlaP v1.0 Beta
No auth needed
Prerequisites:
PHP remote file inclusion enabled on the target server · Ability to host a malicious PHP script on an external server
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (6)
Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/24167
Exploit, Third Party Advisory exploit
x_refsource_exploit-db
https://www.exploit-db.com/exploits/3992
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/38052
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/38051
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2007/1967
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/34535
Scores
EPSS
0.0653
EPSS Percentile
92.9%
Details
Status
published
Products (1)
flap/flap
1.0_beta
Published
May 31, 2007
Tracked Since
Feb 18, 2026