CVE-2007-4818

🗓️ 11 Sep 2007 19:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 42 Views🌐 WEB

Multiple PHP remote file inclusion vulnerabilities in Txx CMS 0.

Reporter	Title	Published	Views	Family All 4
Cvelist	CVE-2007-4818	11 Sep 200719:00	–	cvelist
NVD	CVE-2007-4818	11 Sep 200719:17	–	nvd
Prion	Remote file inclusion	11 Sep 200719:17	–	prion
canvas	Immunity Canvas: TXXCMS_INCLUDE	11 Sep 200719:17	–	canvas

NVD

Node

txx_cms txx_cmsMatch0.2

Source	Link
securityfocus	www.securityfocus.com/archive/1/478870/100/0/threaded
exploit-db	www.exploit-db.com/exploits/4381
securityreason	www.securityreason.com/securityalert/3116
osvdb	www.osvdb.org/38393
osvdb	www.osvdb.org/38390
osvdb	www.osvdb.org/38392
securityfocus	www.securityfocus.com/bid/25597
osvdb	www.osvdb.org/38391
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/36511

Parameter	Position	Path	Description	CWE
doc_root	query param	modules/addons/plugin.php	Remote file inclusion via doc_root parameter enabling arbitrary PHP code execution	CWE-94
doc_root	query param	modules/addons/sidebar.php	Remote file inclusion via doc_root parameter enabling arbitrary PHP code execution	CWE-94
doc_root	query param	modules/mail/index.php	Remote file inclusion via doc_root parameter enabling arbitrary PHP code execution	CWE-94
doc_root	query param	modules/mail/mailbox.php	Remote file inclusion via doc_root parameter enabling arbitrary PHP code execution	CWE-94

23 Apr 2026 00:35Current

7.6High risk

Vulners AI Score7.6

CVSS 27.5

EPSS0.25722

cve-2007-4818 php remote file inclusion txx cms vulnerability execution arbitrary code url doc_root parameter addons plugin sidebar mail mailbox modules