Unrated severityNVD Advisory· Published Jan 30, 2007· Updated Jun 16, 2026

CVE-2007-0596

Description

PHP remote file inclusion vulnerability in index/main.php in Aztek Forum 4.00 allows remote authenticated administrators to execute arbitrary PHP code via a URL in the PF[top_url] parameter.

Affected products

Aztek Forum/Forum2 versions
cpe:2.3:a:aztek_forum:aztek_forum:4.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:aztek_forum:aztek_forum:4.0:*:*:*:*:*:*:*
- (no CPE)range: =4.00

Patches

Vulnerability mechanics

References

acid-root.new.fr/poc/21070125.txtnvdExploit
osvdb.org/33593nvd
www.securityfocus.com/archive/1/458076/100/0/threadednvd
www.securityfocus.com/archive/1/458123/100/0/threadednvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000