CyberSec.Space Logo
Back to CVE Browser

CVE-2007-3358

MEDIUM
6.8
CVSS Severity Score
EPSS Score0.1780%
EPSS Percentile31.78th
PublishedJun 22, 2007
Last ModifiedApr 23, 2026

Vulnerability Description

PHP remote file inclusion vulnerability in html/load_lang.php in SerWeb 0.9.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the _SERWEB[serwebdir] parameter.

Affected Platforms (CPE)

📦
Iptel

Serweb

<= 0.9.6

References & Advisories

🔗 http://osvdb.org/36324
🔗 http://secunia.com/advisories/25680
🔗 http://www.securityfocus.com/bid/24581
🔗 http://www.vupen.com/english/advisories/2007/2291
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/34973
🔗 https://www.exploit-db.com/exploits/4089
🔗 http://osvdb.org/36324
🔗 http://secunia.com/advisories/25680

Related Vulnerabilities

CVE-2007-33596.8

Multiple PHP remote file inclusion vulnerabilities in SerWeb 0.9.6 and earlier allow remote attackers to execute arbitrary PHP cod...

CVE-2007-62896.8

Multiple PHP remote file inclusion vulnerabilities in SerWeb 2.0.0 dev1 and earlier allow remote attackers to execute arbitrary PH...

CVE-2007-62905.0

Multiple directory traversal vulnerabilities in js/get_js.php in SERWeb 2.0.0 dev1 and earlier allow remote attackers to read arbi...

CVE-2026-53430

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc (GRPC.Compressor.Gzip, GRPC.Mes...