Unrated severityNVD Advisory· Published Mar 23, 2007· Updated Jun 16, 2026

CVE-2007-1620

Description

Multiple PHP remote file inclusion vulnerabilities in PHP DB Designer 1.02 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) _SESSION[SITE_PATH] parameter to (a) wind/help.php or (b) wind/about.php, or the (2) _SESSION[DRIVER] parameter to (c) db/session.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

PHP Db Designer/PHP Db Designer
cpe:2.3:a:php_db_designer:php_db_designer:*:*:*:*:*:*:*:*
Range: <=1.02

Patches

Vulnerability mechanics

References

osvdb.org/37210nvd
osvdb.org/37211nvd
osvdb.org/37212nvd
www.vupen.com/english/advisories/2007/1007nvd
exchange.xforce.ibmcloud.com/vulnerabilities/33033nvd
www.exploit-db.com/exploits/3501nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.009
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000