Unrated severityNVD Advisory· Published Sep 26, 2007· Updated Jun 16, 2026

CVE-2007-5089

Description

PHP remote file inclusion vulnerability in php-inc/log.inc.php in sk.log 0.5.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the SKIN_URL parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Sk.log/Sk.log2 versions
cpe:2.3:a:sk.log:sk.log:0.5.3:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sk.log:sk.log:0.5.3:*:*:*:*:*:*:*
- (no CPE)range: <=0.5.3

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/25791nvdExploit
osvdb.org/38574nvd
securityreason.com/securityalert/3168nvd
www.attrition.org/pipermail/vim/2007-September/001803.htmlnvd
www.securityfocus.com/archive/1/480484/100/0/threadednvd
www.vupen.com/english/advisories/2007/3256nvd
exchange.xforce.ibmcloud.com/vulnerabilities/36765nvd
www.exploit-db.com/exploits/4454nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000