CVE-2007-3325
LAN Management System <1.9.6 - RCE
Title source: llmDescription
PHP remote file inclusion vulnerability in lib/language.php in LAN Management System (LMS) 1.9.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the _LIB_DIR parameter, a different vector than CVE-2007-1643 and CVE-2007-2205.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Kw3[R]Ln · perlwebappsphp
https://www.exploit-db.com/exploits/4086
References (4)
Scores
EPSS
0.8429
EPSS Percentile
99.3%
Details
Status
published
Products (1)
lms/lan_management_system
< 1.6.9
Published
Jun 21, 2007
Tracked Since
Feb 18, 2026