CVE-2007-1219

CVE Database · CVE-2007-1219

CVE-2007-1219

· N/AModified

CVSS v3.1

N/A

EPSS

2.69%

Published

Mar 2, 2007

Modified

Apr 22, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBAdmin Phorum 3.3.1a - 'del.php?include_path' Remote File Inclusion TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

PHP remote file inclusion vulnerability in actions/del.php in Admin Phorum 3.3.1a allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter.

Affected Products (1)

admin_phorum · admin_phorumvulnerable

References (10)

http://osvdb.org/34635

http://www.securityfocus.com/bid/22739

ExploitVendor Advisory

http://www.vupen.com/english/advisories/2007/0778

https://exchange.xforce.ibmcloud.com/vulnerabilities/32719

https://www.exploit-db.com/exploits/3382