CVE-2007-2485

2007-05-0317:00:00

mitre

www.cve.org

7.6 High

AI Score

Confidence

High

0.089 Low

EPSS

Percentile

94.6%

JSON

PHP remote file inclusion vulnerability in myflash-button.php in the myflash 1.00 and earlier plugin for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the wpPATH parameter.

References

alexrabe.boelinger.com/

osvdb.org/34359

www.securityfocus.com/bid/23749

www.vupen.com/english/advisories/2007/1616

exchange.xforce.ibmcloud.com/vulnerabilities/34000

www.exploit-db.com/exploits/3828