CVE-2007-4170

CRITICAL 10.0CVE-2007-4170 · Published 07/08/2007 · updated 16/06/2026

In short

CVE-2007-4170 is a CRITICAL (CVSS 10.0) vulnerability affecting al-athkar (al-athkar).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 82.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
al-athkar al-athkar	`= 2.0`	No fix yet

Description

Multiple PHP remote file inclusion vulnerabilities in AL-Athkar 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) include parameter to (a) Main.php and (b) get.php and the (2) exec parameter to (c) count.php.

References

securityreason.com/securityalert/2964
securityfocus.com/archive/1/475646/100/0/threaded
exchange.xforce.ibmcloud.com/vulnerabilities/35818

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free