CVE-2007-5696

phpBasic - Remote Code Execution via includes.php root Parameter

Title source: llm
STIX 2.1

Description

PHP remote file inclusion vulnerability in includes.php in phpBasic allows remote attackers to execute arbitrary PHP code via a URL in the root parameter, possibly related to the Music module.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/482680/100/0/threaded
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/3305

Scores

EPSS 0.0114
EPSS Percentile 62.8%

Details

CWE
CWE-94
Status published
Products (1)
phpbasic/phpbasic
Published Oct 29, 2007
Tracked Since Feb 18, 2026