CVE-2007-4738
Estado: ModificadaAlta (7.5)—
Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library (STPHPLibrary) 0.8.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) db_conf or (2) ADODB_DIR parameter to utils/stphpimage_show.php; or a URL in the STPHPLIB_DIR parameter to (3) stphpbutton.php, (4) stphpcheckbox.php, (5) stphpcheckboxwithcaption.php, (6) stphpcheckgroup.php, (7) stphpcomponent.php, (8) stphpcontrolwithcaption.php, (9) stphpedit.php, (10) stphpeditwithcaption.php, (11) stphphr.php, (12) stphpimage.php, (13) stphpimagewithcaption.php, (14) stphplabel.php, (15) stphplistbox.php, (16) stphplistboxwithcaption.php, (17) stphplocale.php, (18) stphppanel.php, (19) stphpradiobutton.php, (20) stphpradiobuttonwithcaption.php, (21) stphpradiogroup.php, (22) stphprichbutton.php, (23) stphpspacer.php, (24) stphptable.php, (25) stphptablecell.php, (26) stphptablerow.php, (27) stphptabpanel.php, (28) stphptabtitle.php, (29) stphptextarea.php, (30) stphptextareawithcaption.php, (31) stphptoolbar.php, (32) stphpwindow.php, (33) stphpxmldoc.php, or (34) stphpxmlelement.php, a different set of vectors than CVE-2007-4737.
Leer descripción completaMostrar menos
NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 11%
- Percentil entre todas las CVEs puntuadas: 96
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-20, CWE-94
Referencias
- http://osvdb.org/39073
- http://osvdb.org/39074
- http://osvdb.org/39075
- http://osvdb.org/39076
- http://osvdb.org/39077
- http://osvdb.org/39078
- http://osvdb.org/39079
- http://osvdb.org/39080
- http://osvdb.org/39081
- http://osvdb.org/39082
- http://osvdb.org/39083
- http://osvdb.org/39084
- http://osvdb.org/39085
- http://osvdb.org/39086
- http://osvdb.org/39087
- http://osvdb.org/39088
- http://osvdb.org/39089
- http://osvdb.org/39090
- http://osvdb.org/39091
- http://osvdb.org/39092
- http://osvdb.org/39093
- http://osvdb.org/39094
- http://osvdb.org/39095
- http://osvdb.org/39096
- http://osvdb.org/39097
- http://osvdb.org/39098
- http://osvdb.org/39099
- http://osvdb.org/39100
- http://osvdb.org/39101
- http://osvdb.org/39102
- http://osvdb.org/39103
- http://osvdb.org/39104
- http://osvdb.org/39105
- http://secunia.com/advisories/26658
- http://www.securityfocus.com/bid/25525
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36417
- http://osvdb.org/39073
- http://osvdb.org/39074
- http://osvdb.org/39075
- http://osvdb.org/39076
- http://osvdb.org/39077
- http://osvdb.org/39078
- http://osvdb.org/39079
- http://osvdb.org/39080
- http://osvdb.org/39081
- http://osvdb.org/39082
- http://osvdb.org/39083
- http://osvdb.org/39084
- http://osvdb.org/39085
- http://osvdb.org/39086
- http://osvdb.org/39087
- http://osvdb.org/39088
- http://osvdb.org/39089
- http://osvdb.org/39090
- http://osvdb.org/39091
- http://osvdb.org/39092
- http://osvdb.org/39093
- http://osvdb.org/39094
- http://osvdb.org/39095
- http://osvdb.org/39096
- http://osvdb.org/39097
- http://osvdb.org/39098
- http://osvdb.org/39099
- http://osvdb.org/39100
- http://osvdb.org/39101
- http://osvdb.org/39102
- http://osvdb.org/39103
- http://osvdb.org/39104
- http://osvdb.org/39105
- http://secunia.com/advisories/26658
- http://www.securityfocus.com/bid/25525
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36417
JSON original (NVD)
Mostrar
{
"id": "CVE-2007-4738",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": true,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2007-09-06T19:17:00.000",
"references": [
{
"url": "http://osvdb.org/39073",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/39074",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/39075",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/39076",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/39077",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/39078",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/39079",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/39080",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/39081",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/39082",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/39083",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/39084",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/39085",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/39086",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/39087",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/39088",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/39089",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/39090",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/39091",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/39092",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/39093",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/39094",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/39095",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/39096",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/39097",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/39098",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/39099",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/39100",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/39101",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/39102",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/39103",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/39104",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/39105",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/26658",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/25525",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36417",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/39073",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/39074",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/39075",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/39076",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/39077",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/39078",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/39079",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/39080",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/39081",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/39082",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/39083",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/39084",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/39085",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/39086",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/39087",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/39088",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/39089",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/39090",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/39091",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/39092",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/39093",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/39094",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/39095",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/39096",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/39097",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/39098",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/39099",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/39100",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/39101",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/39102",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/39103",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/39104",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/39105",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/26658",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/25525",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36417",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-20"
},
{
"lang": "en",
"value": "CWE-94"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library (STPHPLibrary) 0.8.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) db_conf or (2) ADODB_DIR parameter to utils/stphpimage_show.php; or a URL in the STPHPLIB_DIR parameter to (3) stphpbutton.php, (4) stphpcheckbox.php, (5) stphpcheckboxwithcaption.php, (6) stphpcheckgroup.php, (7) stphpcomponent.php, (8) stphpcontrolwithcaption.php, (9) stphpedit.php, (10) stphpeditwithcaption.php, (11) stphphr.php, (12) stphpimage.php, (13) stphpimagewithcaption.php, (14) stphplabel.php, (15) stphplistbox.php, (16) stphplistboxwithcaption.php, (17) stphplocale.php, (18) stphppanel.php, (19) stphpradiobutton.php, (20) stphpradiobuttonwithcaption.php, (21) stphpradiogroup.php, (22) stphprichbutton.php, (23) stphpspacer.php, (24) stphptable.php, (25) stphptablecell.php, (26) stphptablerow.php, (27) stphptabpanel.php, (28) stphptabtitle.php, (29) stphptextarea.php, (30) stphptextareawithcaption.php, (31) stphptoolbar.php, (32) stphpwindow.php, (33) stphpxmldoc.php, or (34) stphpxmlelement.php, a different set of vectors than CVE-2007-4737. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
},
{
"lang": "es",
"value": "Múltiples vulnerabilidades de inclusión remota de archivos PHP en SpeedTech PHP Library (STPHPLibrary) versión 0.8.0, permiten a atacantes remotos ejecutar código PHP arbitrario por medio de una URL en el parámetro (1) db_conf o (2) ADODB_DIR en el archivo utils/stphpimage_show.php; o una URL en el parámetro STPHPLIB_DIR en el archivo (3) stphpbutton.php,(4) stphpcheckbox.php,(5) stphpcheckboxwithcaption.php,(6) stphpcheckgroup.php,(7) stphpcomponent.php,(8) stphpcontrolwithcaption.php,(9) stphpedit.php, (10) stphpeditwithcaption.php, (11) stphphr.php, (12) stphpimage.php, (13) stphpimagewithcaption.php, (14) stphplabel.php, (15) stphplistbox.php, (16) stphplistboxwithcaption.php, (17) stphplocale.php, (18) stphppanel.php, (19) stphpradiobutton.php, (20) stphpradiobuttonwithcaption.php, (21) stphpradiogroup.php, (22) stphprichbutton.php, (23) stphpspacer.php, (24) esptosible.php, (25) stphptablecell.php, (26) stphptablerow.php, (27) stphptabpanel.php, (28) stphptabtitle.php, (29) stphptextarea.php, (30) stphptextareawithcaption.php, (31) stphptoolbar.php, (32) stphpwindow.php, (33) stphpxmldoc.php, o (34) stphpxmlelement.php, un conjunto diferente de vectores de ataque de CVE-2007-4737. NOTA: la procedencia de esta información es desconocida; los datos son obtenidos únicamente de la información de terceros."
}
],
"lastModified": "2026-06-16T22:44:40.967",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:speedtech:stphplibrary:0.8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8E05F402-C6FD-4C3C-B7A5-BC9AADA1FF78"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}