CVE-2007-2481

PHP remote file inclusion vulnerability in wordtube-button.php in the wordTube 1.43 and earlier plugin for WordPress, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the wpPATH parameter.

• http://advisories.echo.or.id/adv/adv81-K-159-2007.txt
• http://alexrabe.boelinger.com/Exploit, Patch
• http://osvdb.org/34358
• http://secunia.com/advisories/25074Patch, Vendor Advisory
• http://securityreason.com/securityalert/2660
• http://www.securityfocus.com/archive/1/467362/100/0/threaded
• http://www.securityfocus.com/bid/23737Exploit, Patch
• http://www.vupen.com/english/advisories/2007/1615
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33996
• https://www.exploit-db.com/exploits/3825
• http://advisories.echo.or.id/adv/adv81-K-159-2007.txt
• http://alexrabe.boelinger.com/Exploit, Patch
• http://osvdb.org/34358
• http://secunia.com/advisories/25074Patch, Vendor Advisory
• http://securityreason.com/securityalert/2660
• http://www.securityfocus.com/archive/1/467362/100/0/threaded
• http://www.securityfocus.com/bid/23737Exploit, Patch
• http://www.vupen.com/english/advisories/2007/1615
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33996
• https://www.exploit-db.com/exploits/3825

Published

May 3, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-2475Unspecified vulnerability in the ADSCHEMA utility in Novell …
• CVE-2007-2476Unspecified vulnerability in Novell SecureLogin (NSL) 6 SP1 …
• CVE-2007-2477PHP remote file inclusion vulnerability in phpMyChat.php3 in…
• CVE-2007-2478Multiple heap-based buffer overflows in the IRC component in…
• CVE-2007-2479Cerulean Studios Trillian Pro before 3.1.5.1 allows remote a…5.9
• CVE-2007-2480The _udp_lib_get_port function in net/ipv4/udp.c in Linux ke…
• CVE-2007-2482Directory traversal vulnerability in wordtube-button.php in …
• CVE-2007-2483Directory traversal vulnerability in js/wptable-button.php i…
• CVE-2007-2484PHP remote file inclusion vulnerability in js/wptable-button…
• CVE-2007-2485PHP remote file inclusion vulnerability in myflash-button.ph…
• CVE-2007-2486Directory traversal vulnerability in download.asp in Motobit…
• CVE-2007-2487Stack-based buffer overflow in AtomixMP3 allows remote attac…