RCE in Phplister

CVE-2007-5167

PHP remote file inclusion vulnerability in .systeme/fonctions.php in phpLister 0.5-pre2 allows remote attackers to execute arbitrary PHP code via a URL in the nom_rep_systeme parameter.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.012 (65.3th percentile) — read the EPSS interpretation.

Affected products

  • Phplister — versions 0.5_pre2
  • N/a — versions n/a

Weakness classification (CWE)

References