CVE-2007-2939

None

CVSS

—

EPSS

64.0%

Published

May 31, 2007

CISA due date

—

The record

Multiple PHP remote file inclusion vulnerabilities in Mazen's PHP Chat 3.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the basepath parameter to (1) ITX.php, (2) IT_Error.php, or (3) IT.php in include/pear/.

Affected packages

Ecosystem	Package	Introduced	Fixed