$ cve CVE-2007-5305 JSON

CVE-2007-5305 EXPLOIT

7.5

HIGH · CVSS 2.0 · EPSS 9.3% (pctl 95)

Patch early

A public exploit exists.

Description

Multiple PHP remote file inclusion vulnerabilities in ELSEIF CMS Beta 0.6 allow remote attackers to execute arbitrary PHP code via a URL in the (1) contenus parameter to (a) contenus.php; the (2) tpelseifportalrepertoire parameter to (b) votes.php, (c) espaceperso.php, (d) enregistrement.php, (e) commentaire.php, and (f) coeurusr.php in utilisateurs/, and (g) articles/fonctions.php and (h) depot/fonctions.php in moduleajouter/; the (3) corpsdesign parameter to (i) articles/usrarticles.php and (j) depot/usrdepot.php in moduleajouter/; and possibly other files.

Scoring

CVSS	7.5 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS	9.3% — more likely to be exploited than 95% of all CVEs
Weakness	CWE-94
On CISA KEV	no
Public exploit	yes
Published	2007-10-09
Last modified	2026-06-16

Affected (1)

Vendor	Product
yannick tanguy	else if cms

Public exploits

Source	Title	Date
exploit-db	Else If CMS 0.6 - Multiple Vulnerabilities	2007-10-06