CVE-2007-2530: Tropicalm Crowell Resource

High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days.

Multiple PHP remote file inclusion vulnerabilities in Tropicalm Crowell Resource 4.5.2 allow remote attackers to execute arbitrary PHP code via a URL in the RESPATH parameter to (1) dosearch.php or (2) printfriendly.php.

Affected products

• Tropicalm Tropicalm Crowell Resource: version 4.5.2 only

Published 2007-05-09. Last modified 2026-06-16.