CVE-2007-2485

None

CVSS

—

EPSS

54.9%

Published

May 3, 2007

CISA due date

—

The record

PHP remote file inclusion vulnerability in myflash-button.php in the myflash 1.00 and earlier plugin for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the wpPATH parameter.

Affected packages

Ecosystem	Package	Introduced	Fixed