CVE-2007-2313: Mxbb Mx Shotcast

High severity, CVSS 7.5. EPSS: 6.1% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in getinfo1.php in the Shotcast 1.0 RC2 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the mx_root_path parameter.

Affected products

• Mxbb Mx Shotcast: version 1.0_rc2 only

Published 2007-04-26. Last modified 2026-06-16.