CVE-2007-1053

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.39%

Published

Feb 21, 2007

Modified

Jun 16, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple PHP remote file inclusion vulnerabilities in phpXmms 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the tcmdp parameter to (1) phpxmmsb.php or (2) phpxmmst.php. NOTE: this issue has been disputed by a reliable third party, stating that the tcmdp variable is initialized by config.php

Affected Products (1)

warped_systems · phpxmmsvulnerable

References (8)

http://attrition.org/pipermail/vim/2007-February/001365.html

Exploit

http://osvdb.org/33749

http://securityreason.com/securityalert/2273

http://www.securityfocus.com/archive/1/460618/100/0/threaded

http://attrition.org/pipermail/vim/2007-February/001365.html

Exploit

http://osvdb.org/33749

http://securityreason.com/securityalert/2273

http://www.securityfocus.com/archive/1/460618/100/0/threaded

KEV Catalog EPSS Scores Vendors All CVEs