CVE-2007-0489: Visohotlink

Medium severity, CVSS 6.8. EPSS: 3.2% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in includes/functions.visohotlink.php in VisoHotlink 1.01 and possibly earlier allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Affected products

• Visohotlink Visohotlink: up to and including 1.01

Published 2007-01-25. Last modified 2026-06-16.