VYPR
← All advisories
Unrated severityNVD Advisory· Published May 4, 2007· Updated Jun 16, 2026

CVE-2007-2504

CVE-2007-2504

Description

PHP remote file inclusion vulnerability in user/turbulence.php in PHP Turbulence 0.0.1 alpha allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[tcore] parameter. NOTE: this vulnerability is disputed by CVE and a reliable third party because a direct request to user/turbulence.php triggers a fatal error before inclusion

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • PHP Turbulence/PHP Turbulence2 versions
    cpe:2.3:a:php_turbulence:php_turbulence:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:php_turbulence:php_turbulence:*:*:*:*:*:*:*:*range: <=0.0.1_alpha
    • (no CPE)range: = 0.0.1 alpha

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.