CVE-2007-2569: Practical Creative And Code Friendly

High severity, CVSS 7.5. EPSS: 8.4% chance of exploitation in the next 30 days.

Multiple PHP remote file inclusion vulnerabilities in Friendly 1.0d1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the friendly_path parameter to (1) core/data/yaml.inc.php, or _load.php in (2) core/data/, (3) core/display/, or (4) core/support/.

Affected products

• Practical Creative And Code Friendly: up to and including 1.0d1

Published 2007-05-09. Last modified 2026-06-16.