CVE-2007-0785

published 2007-02-06

CVE-2007-0785: PHP remote file inclusion vulnerability in previewtheme.php in Flipsource Flip 2.01-final 1.0 and earlier allows remote attackers to execute arbitrary PHP code…

Priority P2 60 high 7.5 CVSS 2.0

AV N AC L Au N C P I P A P

EXPLOIT

PHP remote file inclusion vulnerability in previewtheme.php in Flipsource Flip 2.01-final 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the inc_path parameter.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
flipsource	flip	<= 2.01-final_1.0	—

Detection & IOCs extracted from sources · hover to see the quote

url http://releases.smallaxesolutions.com/flip-2.01.zip↗

path [path]/previewtheme.php↗

command http://Www.Victim.Com/[path]/[path]/previewtheme.php?theme=1&inc_path=Evil.txt?cmd↗

• → Monitor HTTP requests targeting previewtheme.php with a URL-like value in the inc_path parameter, indicating remote file inclusion attempt. ↗
• → The vulnerable code includes user-supplied inc_path directly; look for GET requests with inc_path containing http:// or ftp:// schemes targeting previewtheme.php. ↗

• · The exploit appends a null-byte/query-string trick (Evil.txt?cmd) to the inc_path parameter to bypass the hardcoded filename suffix appended by the include statements. ↗

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.