CVE-2007-2368: Webspell

Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days.

picture.php in WebSPELL 4.01.02 and earlier allows remote attackers to read arbitrary files via the file parameter.

Affected products

• Webspell Webspell: up to and including 4.01.02

Published 2007-04-30. Last modified 2026-06-16.