Unrated severityNVD Advisory· Published May 9, 2007· Updated Apr 23, 2026

CVE-2007-2575

Description

PHP remote file inclusion vulnerability in watermark.php in the vm (aka Jean-Francois Laflamme) watermark 0.4.1 mod for Gallery allows remote attackers to execute arbitrary PHP code via a URL in the GALLERY_BASEDIR parameter.

Affected products

Vm Watermark/Vm Watermark
cpe:2.3:a:vm_watermark:vm_watermark:0.4.1:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

osvdb.org/37655nvdExploit
www.vupen.com/english/advisories/2007/1674nvdVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/34112nvd
www.exploit-db.com/exploits/3857nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.005
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000