Back to CVE Browser

CVE-2007-1795

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0830%

EPSS Percentile18.89th

PublishedApr 2, 2007

Last ModifiedApr 23, 2026

Vulnerability Description

JCcorp URLshrink 1.3.1 allows remote attackers to execute arbitrary PHP code via the email address field in an HTML link. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected Platforms (CPE)

📦

Jccorp

Urlshrink

= 1.3.1

References & Advisories

🔗 http://developers.jccorp.net/modules/newbb/viewtopic.php?topic_id=33&forum=8

🔗 http://www.securityfocus.com/bid/23217

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/33320

🔗 http://developers.jccorp.net/modules/newbb/viewtopic.php?topic_id=33&forum=8

🔗 http://www.securityfocus.com/bid/23217

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/33320

Related Vulnerabilities

CVE-2007-141610.0

PHP remote file inclusion vulnerability in createurl.php in JCcorp (aka James Coyle) URLshrink allows remote attackers to execute ...

CVE-2007-179610.0

Multiple unspecified vulnerabilities in JCcorp URLshrink before 1.3.2 have unspecified attack vectors and impact.

CVE-2007-023610.0

Double free vulnerability in the _ATPsndrsp function in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attacker...

CVE-2007-025410.0

Format string vulnerability in the errors_create_window function in errors.c in xine-ui allows attackers to execute arbitrary code...