CVE-2007-6177

no score yetEPSS 2.7%

PHP remote file inclusion vulnerability in Exchange/include.php in PHP_CON 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the webappcfg[APPPATH] parameter.

EPSS: 2.7% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2007-11-30
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

php_con:php_con

References

http://osvdb.org/38915
http://secunia.com/advisories/27852
http://www.securityfocus.com/bid/26622
https://exchange.xforce.ibmcloud.com/vulnerabilities/38679
https://www.exploit-db.com/exploits/4670

Check your stack JSON