CyberSec.Space Logo
Back to CVE Browser

CVE-2007-1416

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1500%
EPSS Percentile18.69th
PublishedMar 12, 2007
Last ModifiedApr 23, 2026

Vulnerability Description

PHP remote file inclusion vulnerability in createurl.php in JCcorp (aka James Coyle) URLshrink allows remote attackers to execute arbitrary PHP code via a URL in the formurl parameter.

Affected Platforms (CPE)

📦
Jccorp

Urlshrink

= 1.3.1

References & Advisories

🔗 http://osvdb.org/33982
🔗 http://secunia.com/advisories/24340
🔗 http://securityreason.com/securityalert/2415
🔗 http://www.securityfocus.com/archive/1/462310/100/0/threaded
🔗 http://www.securityfocus.com/archive/1/463523/100/0/threaded
🔗 http://www.securityfocus.com/bid/22894
🔗 http://www.vupen.com/english/advisories/2007/0902
🔗 http://osvdb.org/33982

Related Vulnerabilities

CVE-2007-179510.0

JCcorp URLshrink 1.3.1 allows remote attackers to execute arbitrary PHP code via the email address field in an HTML link. NOTE: t...

CVE-2007-179610.0

Multiple unspecified vulnerabilities in JCcorp URLshrink before 1.3.2 have unspecified attack vectors and impact.

CVE-2007-350010.0

Xeweb XEForum allows remote attackers to gain privileges via a modified xeforum cookie.

CVE-2007-049610.0

PHP remote file inclusion vulnerability in lib/nl/nl.php in Neon Labs Website (nlws) 3.2 and earlier allows remote attackers to ex...