CVE-2007-1715

no score yetEPSS 2.5%

PHP remote file inclusion vulnerability in frontpage.php in Free Image Hosting 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter. NOTE: the forgot_pass.php vector is already covered by CVE-2006-5670, and the login.php vector overlaps CVE-2006-5763.

EPSS: 2.5% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
Published: 2007-03-27
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

free_php_scripts:free_image_hosting

References

http://osvdb.org/37179
https://exchange.xforce.ibmcloud.com/vulnerabilities/33196
https://www.exploit-db.com/exploits/3568
http://osvdb.org/37179
https://exchange.xforce.ibmcloud.com/vulnerabilities/33196

Check your stack JSON