CVE-2007-4028: Webspell

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

Absolute path traversal vulnerability in index.php in Webspell 4.01.02 allows remote attackers to include and execute arbitrary local files via a full pathname in the site parameter. NOTE: some of these details are obtained from third party information.

Affected products

• Webspell Webspell: version 4.01.02 only

Published 2007-07-26. Last modified 2026-06-16.