CVE-2007-1771: Ay System Solutions Web Content System

High severity, CVSS 9.3. EPSS: 4.7% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in manage/javascript/formjavascript.php in Ay System Solutions Web Content System (WCS) 2.7.1 allows remote attackers to execute arbitrary PHP code via a URL in the path[JavascriptEdit] parameter.

Affected products

• Ay System Solutions Web Content System: version 2.7.1 only

Published 2007-03-30. Last modified 2026-06-16.