CVE-2007-5565

9.8 criticalEPSS 1.3%

Critical (9.8) in phpscms phpscms. EPSS 1.3% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in includes/functions.php in phpSCMS 0.0.1-Alpha1 allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. NOTE: this issue is disputed by CVE because the identified code is in a function that is not accessible via direct request

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2007-10-18
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

phpscms:phpscms

References

http://arfis.wordpress.com/2007/09/13/rfi-02-phpscms/
http://arfis.wordpress.com/2007/09/13/rfi-02-phpscms/

Check your stack JSON