CVE-2007-2169: Mozzers Subsystem

High severity, CVSS 7.5. EPSS: 5.9% chance of exploitation in the next 30 days.

Static code injection vulnerability in add.php in Mozzers SubSystem 1.0 allows remote attackers to inject PHP code into subs.php via the (1) Sub-name or (2) Sub-url field. NOTE: an earlier report indicated that the add action can be reached through a request to index.php.

Affected products

• Mozzers Subsystem Mozzers Subsystem: up to and including 1.0

Published 2007-04-22. Last modified 2026-06-16.