Unrated severityNVD Advisory· Published Apr 18, 2007· Updated Jun 16, 2026

CVE-2007-2088

Description

Multiple PHP remote file inclusion vulnerabilities in Sitebar 3.3.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) writerFile parameter to index.php and the (2) file parameter to Integrator.php.

Affected products

Sitebar/Sitebar
cpe:2.3:a:sitebar:sitebar:*:*:*:*:*:*:*:*
Range: <=3.3.5

Patches

Vulnerability mechanics

References

osvdb.org/35393nvd
osvdb.org/35394nvd
securityreason.com/securityalert/2586nvd
www.securityfocus.com/archive/1/465860/100/0/threadednvd
exchange.xforce.ibmcloud.com/vulnerabilities/33688nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000