Multiple PHP remote file inclusion vulnerabilities in myphpPagetool 0.4.3 allow remote attackers to execute arbitrary PHP code via a URL…

Description

Multiple PHP remote file inclusion vulnerabilities in myphpPagetool 0.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the ptinclude parameter to (1) help1.php, (2) help2.php, (3) help3.php, (4) help4.php, (5) help5.php, (6) help6.php, (7) help7.php, (7) help8.php, (8) help9.php, or (10) index.php in doc/admin/.

Scores

EPSS (exploitation in 30 days)

3.6% · top 11% of all CVEs (3 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Weakness

• n/a
• CWE-94 (opens in a new tab)

Affected products

• n/a

  • affected n/a

References (11)

• 43152 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 43155 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 43150 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 43158 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 43157 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 43151 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 43154 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 43153 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 43156 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 43159 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• http://arfis.wordpress.com/2007/09/14/rfi-03-myphppagetool/ (opens in a new tab)x_refsource_MISCx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Record last updated 7 Aug 2024, 15:17 UTC.