CVE-2007-3358

MEDIUM

6.8

CVSS Severity Score

EPSS Score0.1780%

EPSS Percentile31.78th

Published2007年6月22日

Last Modified2026年4月23日

Vulnerability Description

PHP remote file inclusion vulnerability in html/load_lang.php in SerWeb 0.9.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the _SERWEB[serwebdir] parameter.

Affected Platforms (CPE)

📦

Iptel

Serweb

<= 0.9.6

References & Advisories

🔗 http://osvdb.org/36324

🔗 http://secunia.com/advisories/25680

🔗 http://www.securityfocus.com/bid/24581

🔗 http://www.vupen.com/english/advisories/2007/2291

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/34973

🔗 https://www.exploit-db.com/exploits/4089