CVE-2007-4907
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 8.2%
exploitation probability
8.2%top 6% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Multiple PHP remote file inclusion vulnerabilities in X-Cart allow remote attackers to execute arbitrary PHP code via a URL in the xcart_dir parameter to (1) config.php, (2) prepare.php, (3) smarty.php, (4) customer/product.php, (5) provider/auth.php, and (6) admin/auth.php.
Affected products
n/a · n/apublic PoCs found — 1
cve_referencewww.exploit-db.com/exploits/4396unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.