CVE-2007-1554
Last modified
CVE-2007-1554 is a vulnerability of currently unknown severity. Direct static code injection vulnerability in admin/configuration.php in Guestbara 1.2 and earlier allows remote authenticated users to inject arbitrary PHP code into config.php via the (1) admin_mail, (2) emotpatch, (3) login, (4) pass, and unspecified other parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.. EPSS estimates a 1.05% chance of exploitation in the next 30 days.
Description
Direct static code injection vulnerability in admin/configuration.php in Guestbara 1.2 and earlier allows remote authenticated users to inject arbitrary PHP code into config.php via the (1) admin_mail, (2) emotpatch, (3) login, (4) pass, and unspecified other parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Guestbara | Guestbara | 1.2 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-1554?
How severe is CVE-2007-1554?
How do I fix CVE-2007-1554?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-1548SQL injection vulnerability in functions/functions_filters.a…
- CVE-2007-1549Unrestricted file upload vulnerability in gallery.php in php…
- CVE-2007-1550Multiple SQL injection vulnerabilities in phpx 3.5.15 allow …
- CVE-2007-1551Multiple cross-site scripting (XSS) vulnerabilities in phpx …
- CVE-2007-1552Unrestricted file upload vulnerability in usercp.php in Meta…
- CVE-2007-1553admin/configuration.php in Guestbara 1.2 and earlier allows …
- CVE-2007-1555SQL injection vulnerability in forum.php in the Minerva mod …
- CVE-2007-1556SQL injection vulnerability in kommentare.php in Creative Fi…
- CVE-2007-1557Format string vulnerability in F-Secure Anti-Virus Client Se…
- CVE-2007-1558The APOP protocol allows remote attackers to guess the first…
- CVE-2007-1559Multiple stack-based buffer overflows in SonicDVDDashVRNav.d…
- CVE-2007-1560The clientProcessRequest() function in src/client_side.c in …
Are you affected by CVE-2007-1554?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST