CVE-2007-1809: Grafx Software Company Website Builder

High severity, CVSS 7.5. EPSS: 8.4% chance of exploitation in the next 30 days.

Multiple PHP remote file inclusion vulnerabilities in GraFX Company WebSite Builder (CWB) PRO 1.5 allow remote attackers to execute arbitrary PHP code via a URL in the INCLUDE_PATH parameter to (1) cls_headline_prod.php, (2) cls_listorders.php, or (3) cls_viewpastorders.php in include/, different vectors than CVE-2007-1513.

Affected products

• Grafx Software Company Website Builder: version 1.5 only

Published 2007-04-02. Last modified 2026-06-16.