VulnerabilityModified

CVE-2007-3710

PHP remote file inclusion vulnerability in example/gamedemo/inc.functions.php in PHP Comet-Server allows remote attackers to execute arbitrary PHP code via a URL in the projectPath parameter.

HIGH 7.5EPSS 1.35%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.35%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

PHP remote file inclusion vulnerability in example/gamedemo/inc.functions.php in PHP Comet-Server allows remote attackers to execute arbitrary PHP code via a URL in the projectPath parameter.

CVSS 2.0: 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS: 1.35% probability · 70th percentile
CISA KEV: Not listed
Affected: php comet-server/php comet-server
Source: cve@mitre.org

References

http://osvdb.org/36150
http://securityreason.com/securityalert/2876
http://www.securityfocus.com/archive/1/473188/100/0/threaded
http://osvdb.org/36150
http://securityreason.com/securityalert/2876
http://www.securityfocus.com/archive/1/473188/100/0/threaded

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.