CVE-2007-6657

Published: Jan 4, 2008Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

PHP remote file inclusion vulnerability in source/includes/load_forum.php in Mihalism Multi Forum Host 3.0.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mfh_root_path parameter.

Affected (1)

Products: Mihalism: Multi Host

Mihalism

1 product

Multi Host

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mihalism Multi Host	All versions

Related CWEs

CWE-94

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (6)

http://osvdb.org/39895

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/39316

Source: cve@mitre.org

https://www.exploit-db.com/exploits/4808

Source: cve@mitre.org

http://osvdb.org/39895

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/39316

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/4808

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.