CVE-2007-1525

None

CVSS

—

EPSS

37.9%

Published

Mar 20, 2007

CISA due date

—

The record

Direct static code injection vulnerability in postpost.php in Dayfox Blog (dfblog) 4 allows remote attackers to execute arbitrary PHP code via the cat parameter, which can be executed via a request to posts.php.

Affected packages

Ecosystem	Package	Introduced	Fixed