Unrated severityNVD Advisory· Published Jan 25, 2007· Updated Apr 23, 2026
CVE-2007-0487
CVE-2007-0487
Description
PHP remote file inclusion vulnerability in index.php in FreeForum 0.9.0 allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter. NOTE: this issue has been disputed by third party researchers, stating that fpath variable is initialized before being used
Affected products
1- cpe:2.3:a:zoneo-soft:freeforum:0.9.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3News mentions
0No linked articles in our index yet.