CVE-2007-1996

MEDIO 6.8CVE-2007-1996 · Published 12/04/2007 · updated 16/06/2026

In breve

CVE-2007-1996 è una vulnerabilità MEDIO (CVSS 6.8) che riguarda codebreak (codebreak).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.2%, superiore al 82.3% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
codebreak codebreak	`≤ 1.1.2`	No fix yet

Description

PHP remote file inclusion vulnerability in codebreak.php in CodeBreak, probably 1.1.2 and earlier, allows remote attackers to execute arbitrary PHP code via a URL in the process_method parameter.

References

secunia.com/advisories/24846 · Vendor Advisory
securityreason.com/securityalert/2562
securityfocus.com/archive/1/465382/100/0/threaded
securityfocus.com/bid/23425
vupen.com/english/advisories/2007/1355 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free