CVE-2007-2628: Justin Koivisto Phpsecurityadmin

High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in include/logout.php in Justin Koivisto SecurityAdmin for PHP (aka PHPSecurityAdmin, PSA) 4.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the PSA_PATH parameter.

Affected products

• Justin Koivisto Phpsecurityadmin: version 4.0.2 only

Published 2007-05-11. Last modified 2026-06-16.