VULNERABILITY INTELLIGENCE

CVE-2007-2190

CVSS score6.8 MEDIUM

EPSS probability1.35%

CISA KEVNot currently listed

Published2007-04-24

Last modified2026-06-16

Description

PHP remote file inclusion vulnerability in admin/public/webpages.php in Eba News 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter.