CVE-2007-2636: Jason Frisvold Phptodo

Medium severity, CVSS 6.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Unspecified vulnerability in phpTodo before 0.8.1 allows remote attackers to have an unknown impact via newlines in regular expressions to (1) index.php, (2) feed.php, (3) prefs.php, and (4) todolist.php; and (5) classTodoItem.php and (6) phpTodoUser.php in libs/. NOTE: some of these details are obtained from third party information.

Affected products

• Jason Frisvold Phptodo: up to and including 0.8.0

Published 2007-05-13. Last modified 2026-06-16.