Unrated severityNVD Advisory· Published Sep 26, 2007· Updated Apr 23, 2026
CVE-2007-5089
CVE-2007-5089
Description
PHP remote file inclusion vulnerability in php-inc/log.inc.php in sk.log 0.5.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the SKIN_URL parameter.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
8- www.securityfocus.com/bid/25791nvdExploit
- osvdb.org/38574nvd
- securityreason.com/securityalert/3168nvd
- www.attrition.org/pipermail/vim/2007-September/001803.htmlnvd
- www.securityfocus.com/archive/1/480484/100/0/threadednvd
- www.vupen.com/english/advisories/2007/3256nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/36765nvd
- www.exploit-db.com/exploits/4454nvd
News mentions
0No linked articles in our index yet.