CVE-2007-3297: Cybozu Labs Musoo

High severity, CVSS 7.5. EPSS: 9% chance of exploitation in the next 30 days.

Multiple PHP remote file inclusion vulnerabilities in Musoo 0.21 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[ini_array][EXTLIB_PATH] parameter to (1) msDb.php, (2) modules/MusooTemplateLite.php, or (3) modules/SoundImporter.php.

Affected products

• Cybozu Labs Musoo: version 0.21 only

Published 2007-06-20. Last modified 2026-06-16.