CVE-2007-2424

no score yetEPSS 9.9%

PHP remote file inclusion vulnerability in help/index.php in The Merchant (themerchant) 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the show parameter.

EPSS: 9.9% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
Published: 2007-05-02
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

the_merchant_project:the_merchant

References

http://osvdb.org/35503
http://secunia.com/advisories/24883
http://www.securityfocus.com/bid/23707
http://www.vupen.com/english/advisories/2007/1585
https://exchange.xforce.ibmcloud.com/vulnerabilities/33968

Check your stack JSON