CVE-2007-5565: Phpscms

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in includes/functions.php in phpSCMS 0.0.1-Alpha1 allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. NOTE: this issue is disputed by CVE because the identified code is in a function that is not accessible via direct request

Affected products

• Phpscms Phpscms: version 0.0.1 only

Published 2007-10-18. Last modified 2026-06-16.