CVE-2007-6174

HIGH 8.5CVE-2007-6174 · Published 30/11/2007 · updated 16/06/2026

In short

CVE-2007-6174 is a HIGH (CVSS 8.5) vulnerability affecting phpdevshell (phpdevshell).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 74.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
phpdevshell phpdevshell	`≤ 0.6.0`	No fix yet

Description

PHPDevShell before 0.7.0 allows remote authenticated users to gain privileges via a crafted request to update a user profile. NOTE: some of these details are obtained from third party information.

References

secunia.com/advisories/27828 · Patch
phpdevshell.org/changelog
securityfocus.com/bid/26615
exchange.xforce.ibmcloud.com/vulnerabilities/38736

More vulnerabilities in phpdevshell

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free