← Database

CVE-2007-4737

HIGH CVSS: 7.5 Published: 2007-09-06 Modified: 2026-06-16

Description

Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library (STPHPLibrary) 0.8.0 allow remote attackers to execute arbitrary PHP code via a URL in the STPHPLIB_DIR parameter to (1) stphpapplication.php, (2) stphpbtnimage.php, or (3) stphpform.php.

Affected Platforms

Speedtech Stphplibrary

Weakness Type

CWE-94

References