CVE-2007-2774

Multiple PHP remote file inclusion vulnerabilities in SunLight CMS 5.3 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to (1) _connect.php or (2) modules/startup.php.

• http://osvdb.org/36227Broken Link
• http://osvdb.org/36228Broken Link
• http://secunia.com/advisories/25366Not Applicable
• http://www.securityfocus.com/bid/24062Broken Link
• http://www.vupen.com/english/advisories/2007/1885Not Applicable
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34393Third Party Advisory
• https://www.exploit-db.com/exploits/3953Exploit, VDB Entry
• http://osvdb.org/36227Broken Link
• http://osvdb.org/36228Broken Link
• http://secunia.com/advisories/25366Not Applicable
• http://www.securityfocus.com/bid/24062Broken Link
• http://www.vupen.com/english/advisories/2007/1885Not Applicable
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34393Third Party Advisory
• https://www.exploit-db.com/exploits/3953Exploit, VDB Entry

Published

May 21, 2007

Last Modified

Jun 16, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-2768OpenSSH, when using OPIE (One-Time Passwords in Everything) …
• CVE-2007-2769BES before 3.5.0 in OPeNDAP 4 (Hydrax) before 1.2.1 does not…
• CVE-2007-2770Stack-based buffer overflow in Eudora 7.1 allows user-assist…
• CVE-2007-2771Stack-based buffer overflow in the LEAD Technologies LeadToo…
• CVE-2007-2772(1) caloggerd.exe (camt70.dll) and (2) mediasvr.exe (catirpc…
• CVE-2007-2773SQL injection vulnerability in plugins/mp3playlist/mp3playli…
• CVE-2007-2775AlstraSoft Live Support 1.21 sends a redirect to the web bro…
• CVE-2007-2776AlstraSoft Template Seller Pro 3.25 and earlier sends a redi…
• CVE-2007-2777Unrestricted file upload vulnerability in admin/addsptemplat…
• CVE-2007-2778Multiple directory traversal vulnerabilities in MolyX BOARD …
• CVE-2007-2779PHP remote file inclusion vulnerability in template_csv.php …
• CVE-2007-2780PsychoStats 3.0.6b and earlier allows remote attackers to ob…