CVE-2007-0576

PHP remote file inclusion vulnerability in xt_counter.php in Xt-Stats 2.3.x up to 2.4.0.b3 allows remote attackers to execute arbitrary PHP code via a URL in the server_base_dir parameter.

• http://osvdb.org/32980
• http://seclists.org/bugtraq/2007/Jan/0643.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/23967Vendor Advisory
• http://www.securityfocus.com/bid/22276Exploit, Vendor Advisory
• http://www.vupen.com/english/advisories/2007/0387
• http://www.xt-scripts.com/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31871
• https://www.exploit-db.com/exploits/3209
• http://osvdb.org/32980
• http://seclists.org/bugtraq/2007/Jan/0643.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/23967Vendor Advisory
• http://www.securityfocus.com/bid/22276Exploit, Vendor Advisory
• http://www.vupen.com/english/advisories/2007/0387
• http://www.xt-scripts.com/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31871
• https://www.exploit-db.com/exploits/3209

Published

Jan 30, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-0570PHP remote file inclusion vulnerability in ains_main.php in …
• CVE-2007-0571PHP remote file inclusion vulnerability in include/lib/lib_h…
• CVE-2007-0572PHP remote file inclusion vulnerability in include/irc/phpIR…
• CVE-2007-0573PHP remote file inclusion vulnerability in includes/config.i…
• CVE-2007-0574SQL injection vulnerability in rss/show_webfeed.php in Spoon…
• CVE-2007-0575Multiple SQL injection vulnerabilities in the administrative…
• CVE-2007-0577PHP remote file inclusion vulnerability in function.inc.php …
• CVE-2007-0578The http_open function in httpget.c in mpg123 before 0.64 al…
• CVE-2007-0579Unspecified vulnerability in the calendar component in Horde…
• CVE-2007-0580PHP remote file inclusion vulnerability in menu.php in Foro …
• CVE-2007-0581PHP remote file inclusion vulnerability in functions.php in …
• CVE-2007-0582SQL injection vulnerability in default.asp in ChernobiLe 1.0…