CVE-2007-2859

HIGH 7.5CVE-2007-2859 · Published 24/05/2007 · updated 16/06/2026

In short

CVE-2007-2859 is a HIGH (CVSS 7.5) vulnerability affecting simpgb (simpgb).
Chance of exploitation in the next 30 days (EPSS): 2.4%, higher than 84.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
simpgb simpgb	`= 1.46.0`	No fix yet

Description

Multiple PHP remote file inclusion vulnerabilities in SimpGB 1.46.0 allow remote attackers to execute arbitrary PHP code via a URL in the path_simpgb parameter to (1) guestbook.php, (2) search.php, (3) mailer.php, (4) avatars.php, (5) ccode.php, (6) comments.php, (7) emoticons.php, (8) gbdownload.php, and possibly other PHP scripts.

References

osvdb.org/38101
osvdb.org/38102
osvdb.org/38103
osvdb.org/38104
osvdb.org/38105
osvdb.org/38106
osvdb.org/38107
osvdb.org/38108
securityreason.com/securityalert/2735
attrition.org/pipermail/vim/2007-May/001626.html
securityfocus.com/archive/1/469219/100/0/threaded
xmors-seurity.com/advisory/SimpGB%28rfi%29.txt · URL Repurposed
exchange.xforce.ibmcloud.com/vulnerabilities/34428

More vulnerabilities in simpgb

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free