CVE-2007-5566

HIGH 7.5CVE-2007-5566 · Published 18/10/2007 · updated 16/06/2026

In short

CVE-2007-5566 is a HIGH (CVSS 7.5) vulnerability affecting phpblog (phpblog).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 68.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
phpblog phpblog	`= 0.1`	No fix yet

Description

Multiple PHP remote file inclusion vulnerabilities in PHPBlog 0.1 Alpha allow remote attackers to execute arbitrary PHP code via a URL in the blog_localpath parameter to (1) includes/functions.php or (2) includes/email.php. NOTE: this issue is disputed by CVE because the identified code is in functions that are not accessible via direct request

References

arfis.wordpress.com/2007/09/13/rfi-02-phpblog
osvdb.org/39392

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free