CVE-2007-0702
Last modified
CVE-2007-0702 is a vulnerability of currently unknown severity. Multiple PHP remote file inclusion vulnerabilities in phpEventMan 1.0.2 allow remote attackers to execute arbitrary PHP code via a URL in the level parameter to (1) Shared/controller/text.ctrl.php or (2) UserMan/controller/common.function.php.. EPSS estimates a 3.58% chance of exploitation in the next 30 days.
Description
Multiple PHP remote file inclusion vulnerabilities in phpEventMan 1.0.2 allow remote attackers to execute arbitrary PHP code via a URL in the level parameter to (1) Shared/controller/text.ctrl.php or (2) UserMan/controller/common.function.php.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Phpeventman | Phpeventman | 1.0.2 |
References
- http://secunia.com/advisories/24000Vendor Advisory
- http://secunia.com/advisories/24000Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-0702?
How severe is CVE-2007-0702?
How do I fix CVE-2007-0702?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-0696Cross-site scripting (XSS) vulnerability in error messages i…
- CVE-2007-0697index2.php in ACGVannu 1.3 and earlier allows remote attacke…
- CVE-2007-0698Multiple SQL injection vulnerabilities in ACGVannu 1.3 and e…
- CVE-2007-0699PHP remote file inclusion vulnerability in includes/includes…
- CVE-2007-0700Directory traversal vulnerability in index.php in Guernion S…
- CVE-2007-0701PHP remote file inclusion vulnerability in inc/common.inc.ph…
- CVE-2007-0703PHP remote file inclusion vulnerability in library/StageLoad…
- CVE-2007-0704PHP remote file inclusion vulnerability in install.php in So…
- CVE-2007-0705Cross-zone scripting vulnerability in Sleipnir 2.49 and earl…
- CVE-2007-0706Cross-zone scripting vulnerability in Darksky RSS bar for In…
- CVE-2007-0707Stack-based buffer overflow in GOM Player 2.0.12.3375 allows…
- CVE-2007-0708cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal …
Are you affected by CVE-2007-0702?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST