VULNERABILITY INTELLIGENCE
CVE-2007-2670
CVSS score4.3 MEDIUM
EPSS probability1.22%
CISA KEVNot currently listed
Published2007-05-14
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N
Description
PHPChain 1.0 and earlier allows remote attackers to obtain the installation path via invalid values of the catid parameter to (1) settings.php or (2) cat.php, as demonstrated by XSS manipulations.