Lucene search
K

CVE-2007-4290

๐Ÿ—“๏ธย 09 Aug 2007ย 21:00:00Reported byย mitreTypeย 
cve
ย cve
๐Ÿ”—ย web.nvd.nist.gov๐Ÿ‘ย 46ย Views๐ŸŒ WEB

Multiple PHP remote file inclusion vulnerabilities in Guestbook Script 1.9 allowing remote attackers to execute arbitrary PHP code via a URL in the script_root parameter

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
Circl
CVE-2007-4290
17 Jan 202514:56
โ€“circl
Cvelist
CVE-2007-4290
9 Aug 200721:00
โ€“cvelist
NVD
CVE-2007-4290
9 Aug 200721:17
โ€“nvd
Prion
Remote file inclusion
9 Aug 200721:17
โ€“prion
Positive Technologies
PT-2007-5481 ยท Unknown ยท X-Script Guestbook
9 Aug 200700:00
โ€“ptsecurity
Vulnrichment
CVE-2007-4290
9 Aug 200721:00
โ€“vulnrichment
NVD
ParameterPositionPathDescriptionCWE
script_rootquery param/delete.phpPHP remote file inclusion via script_root parameter in delete.phpCWE-94
script_rootquery param/edit.phpPHP remote file inclusion via script_root parameter in edit.phpCWE-94
script_rootquery param/inc/common.inc.phpPHP remote file inclusion via script_root parameter in inc/common.inc.phpCWE-94
script_rootquery param/admin/database.phpPHP remote file inclusion via script_root parameter in admin/database.phpCWE-94
script_rootquery param/admin/entries.phpPHP remote file inclusion via script_root parameter in admin/entries.phpCWE-94
script_rootquery param/admin/index.phpPHP remote file inclusion via script_root parameter in admin/index.phpCWE-94
script_rootquery param/admin/logout.phpPHP remote file inclusion via script_root parameter in admin/logout.phpCWE-94
script_rootquery param/admin/settings.phpPHP remote file inclusion via script_root parameter in admin/settings.phpCWE-94

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

23 Apr 2026 00:35Current
7.6High risk
Vulners AI Score7.6
CVSS 27.5
CVSS 3.19.8
EPSS0.00999
SSVC
46