RCE in Nexty

CVE-2007-5163

PHP remote file inclusion vulnerability in includes/functions/layout.php in Nexty 1.01.A Beta allows remote attackers to execute arbitrary PHP code via a URL in the rel parameter. NOTE: this issue is disputed by CVE because the applicable include is in a function that is not called on a direct request

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.012 (65.3th percentile) — read the EPSS interpretation.

Affected products

  • Nexty — versions 1.01._abeta
  • N/a — versions n/a

Weakness classification (CWE)

References