CVE-2007-1986

HIGH 7.5CVE-2007-1986 · Published 12/04/2007 · updated 16/06/2026

In short

CVE-2007-1986 is a HIGH (CVSS 7.5) vulnerability affecting aroundme (barnraiser).
Chance of exploitation in the next 30 days (EPSS): 3.7%, higher than 89.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
aroundme barnraiser	`= 0.7.7`	No fix yet

Description

Multiple PHP remote file inclusion vulnerabilities in barnraiser AROUNDMe 0.7.7 allow remote attackers to execute arbitrary PHP code via a URL in the (1) language_path_core parameter to inc/core_profile.header.php, the (2) template_path_core parameter to template/barnraiser_01/maint_contact_view.tpl.php, and the (3) template_path parameter to template/barnraiser_01/default.tpl.php. NOTE: this issue might overlap CVE-2006-5533.

References

More vulnerabilities in aroundme

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free