CVE-2007-3230

EPSS 67.9%

PHP remote file inclusion vulnerability in phphtml.php in Idan Sofer PHP::HTML 0.6.4 allows remote attackers to execute arbitrary PHP code via a URL in the htmlclass_path parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4072unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/36304 http://secunia.com/advisories/25687 https://exchange.xforce.ibmcloud.com/vulnerabilities/34871 https://www.exploit-db.com/exploits/4072 http://www.securityfocus.com/bid/24477 http://www.vupen.com/english/advisories/2007/2208