CVE-2007-3632

LimeSurvey 1.49RC2 - Remote File Inclusion via homedir Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-3632. PoCs published by Yakir Wizman.

AI-analyzed exploit summary This is a writeup detailing a Remote File Inclusion (RFI) vulnerability in LimeSurvey (PHPSurveyor) version 1.49RC2. It lists multiple files vulnerable to RFI via the 'homedir' parameter but does not include executable exploit code.

Description

Multiple PHP remote file inclusion vulnerabilities in LimeSurvey (aka PHPSurveyor) 1.49RC2 allow remote attackers to execute arbitrary PHP code via a URL in the homedir parameter to (1) OLE/PPS/File.php, (2) OLE/PPS/Root.php, (3) Spreadsheet/Excel/Writer.php, or (4) OLE/PPS.php in admin/classes/pear/; or (5) Worksheet.php, (6) Parser.php, (7) Workbook.php, (8) Format.php, or (9) BIFFwriter.php in admin/classes/pear/Spreadsheet/Excel/Writer/.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Yakir Wizman · textwebappsphp
https://www.exploit-db.com/exploits/4156

This is a writeup detailing a Remote File Inclusion (RFI) vulnerability in LimeSurvey (PHPSurveyor) version 1.49RC2. It lists multiple files vulnerable to RFI via the 'homedir' parameter but does not include executable exploit code.

Classification
Writeup 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Theoretical
Target: LimeSurvey (PHPSurveyor) 1.49RC2
No auth needed
Prerequisites: Network access to the target application · Ability to host a malicious file on a remote server
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (12)

Core 12
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/35284
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/45799
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/45793
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/45795
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/45791
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/45792
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/45796
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/4156
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/45797
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/2459
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/45794
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/45798

Scores

EPSS 0.7088
EPSS Percentile 98.7%

Details

Status published
Products (1)
limesurvey/limesurvey 1.49_rc2
Published Jul 10, 2007
Tracked Since Feb 18, 2026