CVE-2007-4815: Markus Iser Ed Engine

Medium severity, CVSS 6.8. EPSS: 39.4% chance of exploitation in the next 30 days.

Multiple PHP remote file inclusion vulnerabilities in WebED in Markus Iser ED Engine 0.8999 alpha allow remote attackers to execute arbitrary PHP code via a URL in the Codebase parameter to (1) channeledit.php, (2) post.php, (3) view.php, or (4) viewitem.php in source/mod/rss/.

Affected products

• Markus Iser Ed Engine: version 0.8999_alpha only

Published 2007-09-11. Last modified 2026-06-16.