Back to CVE Browser

CVE-2007-4170

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1090%

EPSS Percentile1.39th

PublishedAug 7, 2007

Last ModifiedApr 23, 2026

Vulnerability Description

Multiple PHP remote file inclusion vulnerabilities in AL-Athkar 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) include parameter to (a) Main.php and (b) get.php and the (2) exec parameter to (c) count.php.

Affected Platforms (CPE)

📦

Al Athkar

Al Athkar

= 2.0

References & Advisories

🔗 http://securityreason.com/securityalert/2964

🔗 http://www.securityfocus.com/archive/1/475646/100/0/threaded

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/35818

🔗 http://securityreason.com/securityalert/2964

🔗 http://www.securityfocus.com/archive/1/475646/100/0/threaded

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/35818

Related Vulnerabilities

CVE-2007-158710.0

templates/config/mail.tpl in Tim Soderstrom StatsDawg 0.92 allows remote attackers to execute arbitrary programs by specifying the...

CVE-2007-350010.0

Xeweb XEForum allows remote attackers to gain privileges via a modified xeforum cookie.

CVE-2007-182210.0

Alcatel-Lucent Lucent Technologies voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailbo...

CVE-2007-182310.0

T-Mobile voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by spoofing Calling N...