CVE-2007-0862: Gnopaste

Medium severity, CVSS 6.8. EPSS: 1.1% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in index.php in gnopaste 0.5.3 and earlier allows remote attackers to execute arbitrary PHP code via the GNP_REAL_PATH parameter. NOTE: CVE and a third party dispute this issue, since GNP_REAL_PATH is a constant, not a variable

Affected products

• Gnopaste Gnopaste: up to and including 0.5.3; version 0.5.2 only

Published 2007-02-09. Last modified 2026-06-16.