VULNERABILITY INTELLIGENCE

CVE-2007-2168

CVSS score7.5 HIGH

EPSS probability2.31%

CISA KEVNot currently listed

Published2007-04-22

Last modified2026-06-16

Description

Static code injection vulnerability in process.php in AimStats 3.2 and earlier allows remote attackers to inject PHP code into config.php via the databasehost parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.