CVE-2007-6082: Sciurus Hosting Panel

High severity, CVSS 9.3. EPSS: 3.6% chance of exploitation in the next 30 days.

Direct static code injection vulnerability in acp/savenews.php in Sciurus Hosting Panel, possibly 2.0.3, allows remote attackers to inject arbitrary PHP code via the filecontents parameter, which can be executed by accessing includes/news.php.

Affected products

• Sciurus Sciurus Hosting Panel: version 2.0.3 only

Published 2007-11-22. Last modified 2026-06-16.