CVE-2007-3346: PHP Accounts

High severity, CVSS 7.8. EPSS: 2.8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in index.php in PHPAccounts 0.5 allows remote attackers to include arbitrary local files via unspecified manipulations of the page parameter.

Affected products

• PHP Accounts PHP Accounts: version 0.5 only

Published 2007-06-22. Last modified 2026-06-16.