CVE-2007-5592 — Multiple PHP remote file inclusion vulnerabilities in awzMB 4.2 beta 1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the Setting[OPT_includepath] parameter to (1) adminhelp.php; and (2) admin.incl.php, (3) reg.incl.php, (4) help.incl.php, (5) gbook.incl.php, and (6) core/core.incl.php in modules/

Back Back to CVE browser

MEDIUM

Multiple PHP remote file inclusion vulnerabilities in awzMB 4.2 beta 1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the Setting[OPT_includepath] parameter to (1) adminhelp.php; and (2) admin.incl.php, (3) reg.incl.php, (4) help.incl.php, (5) gbook.incl.php, and (6) core/core.incl.php in modules/

Published Oct 19, 2007

6.8

MEDIUM

CVSS 2.0

EPSS 28.75%

Description

Multiple PHP remote file inclusion vulnerabilities in awzMB 4.2 beta 1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the Setting[OPT_includepath] parameter to (1) adminhelp.php; and (2) admin.incl.php, (3) reg.incl.php, (4) help.incl.php, (5) gbook.incl.php, and (6) core/core.incl.php in modules/.

Affected products

Remediation

No remediation recorded yet.

Metrics

28.75% 0.28747

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.28747

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (16 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	28.75% (0.28747)	98.09th	v5 (v2026.06.15)
Jun 15, 2026	28.75% (0.28747)	97.89th	v5 (v2026.06.15)
Feb 25, 2026	21.36% (0.21358)	95.58th	v4 (v2025.03.14)
Nov 15, 2025	18.83% (0.18830)	95.03th	v4 (v2025.03.14)
Nov 13, 2025	3.82% (0.03822)	87.63th	v4 (v2025.03.14)
Mar 17, 2025	5.10% (0.05101)	89.08th	v4 (v2025.03.14)
Dec 12, 2024	1.96% (0.01955)	89.19th	v3 (v2023.03.01)
Jul 15, 2024	2.69% (0.02692)	90.58th	v3 (v2023.03.01)
Mar 22, 2024	2.70% (0.02704)	90.25th	v3 (v2023.03.01)
Aug 15, 2023	2.63% (0.02626)	88.96th	v3 (v2023.03.01)
Jun 4, 2023	2.85% (0.02850)	89.22th	v3 (v2023.03.01)
Mar 24, 2023	4.59% (0.04589)	91.27th	v3 (v2023.03.01)
Mar 7, 2023	5.18% (0.05184)	91.74th	v3 (v2023.03.01)
Mar 6, 2023	4.19% (0.04187)	87.39th	v2 (v2022.01.01)
Apr 1, 2022	4.19% (0.04187)	86.11th	v2 (v2022.01.01)
Feb 4, 2022	4.19% (0.04187)	69.86th	v2 (v2022.01.01)

Weaknesses (1)

CWE-94

Code Injection

References (4)

http://www.securityfocus.com/bid/26116
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2007/3569
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/37272
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/4545
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://www.securityfocus.com/bid/26116		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2007/3569		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/37272		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/4545		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 19, 2007

Updated Aug 7, 2024

Reserved Oct 19, 2007

Link CVE-2007-5592

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2007-5592

Red Hat

Severity n/a

Public date n/a

Links CVE-2007-5592