CVE-2007-2608: MIPLEX2

High severity, CVSS 7.5. EPSS: 8.2% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in lib/smarty/SmartyFU.class.php in Miplex2 Alpha 1 allows remote attackers to execute arbitrary PHP code via a URL in the system[smarty][dir] parameter.

Affected products

  • MIPLEX2 MIPLEX2: version alpha_1 only

Published 2007-05-11. Last modified 2026-06-16.