CVE-2007-5167: Phplister

Medium severity, CVSS 6.8. EPSS: 1.2% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in .systeme/fonctions.php in phpLister 0.5-pre2 allows remote attackers to execute arbitrary PHP code via a URL in the nom_rep_systeme parameter.

Affected products

• Phplister Phplister: version 0.5_pre2 only

Published 2007-10-01. Last modified 2026-06-16.