CVE-2007-2327

ALTO 7.5CVE-2007-2327 · Published 27/04/2007 · updated 16/06/2026

En resumen

CVE-2007-2327 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a htmleditbox (labs4).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.6%, mayor que el 85.5% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
htmleditbox labs4	`= 2.2`	No fix yet

Description

PHP remote file inclusion vulnerability in _editor.php in HTMLeditbox 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the settings[app_dir] parameter.

References

osvdb.org/35525
securityreason.com/securityalert/2635
securityfocus.com/archive/1/466841/100/0/threaded
securityfocus.com/bid/23664
exchange.xforce.ibmcloud.com/vulnerabilities/33875

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free