CVE-2007-2940: Flap

Medium severity, CVSS 6.8. EPSS: 6.5% chance of exploitation in the next 30 days.

Multiple PHP remote file inclusion vulnerabilities in FlaP 1.0b (1.0 Beta) allow remote attackers to execute arbitrary PHP code via a URL in the pachtofile parameter to (1) skin/html/table.php or (2) login.php.

Affected products

• Flap Flap: version 1.0_beta only

Published 2007-05-31. Last modified 2026-06-16.