Unrated severityNVD Advisory· Published May 9, 2007· Updated Jun 16, 2026

CVE-2007-2540

Description

Multiple PHP remote file inclusion vulnerabilities in PMECMS 1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the config[pathMod] parameter to index.php in (1) mod/image/, (2) mod/liens/, (3) mod/liste/, (4) mod/special/, or (5) mod/texte/.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Pmecms/Pmecms2 versions
cpe:2.3:a:pmecms:pmecms:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:pmecms:pmecms:*:*:*:*:*:*:*:*range: <=1.0
- (no CPE)range: <=1.0

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/23829nvdExploit
secunia.com/advisories/25177nvdVendor Advisory
osvdb.org/35777nvd
osvdb.org/35778nvd
osvdb.org/35779nvd
osvdb.org/35780nvd
osvdb.org/35781nvd
www.vupen.com/english/advisories/2007/1670nvd
exchange.xforce.ibmcloud.com/vulnerabilities/34104nvd
www.exploit-db.com/exploits/3852nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.007
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000