CVE-2007-6553 json
Multiple PHP remote file inclusion vulnerabilities in TeamCal Pro 3.1.000 and earlier allow remote attackers to execute arbitrary PHP code…
published 2007-12-28 18 y ago modified 2026-06-16 4 mo ago also EUVD-2007-6519
- cvss
- 6.8
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 3.7%
- EPSS 3.7% chance of exploitation in 30 days, percentile 89%
- public exploits
- 1
- Exploit-DB
Summary
Multiple PHP remote file inclusion vulnerabilities in TeamCal Pro 3.1.000 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the CONF[app_root] parameter to (1) tcuser.class.php, (2) absencecount.inc.php, (3) avatar.inc.php, (4) csvhandler.class.php, (5) functions.tcpro.php, (6) header.html.inc.php, (7) joomlajack.tcpro.php, (8) menu.inc.php, (9) other.inc.php, (10) tcabsence.class.php, (11) tcabsencegroup.class.php, (12) tcallowance.class.php, (13) tcannouncement.class.php, (14) tcconfig.class.php, (15) tcdaynote.class.php, (16) tcgroup.class.php, (17) tcholiday.class.php, (18) tclogin.class.php, (19) tcmonth.class.php, (20) tctemplate.class.php, (21) tcusergroup.class.php, or (22) tcuseroption.class.php in includes/, possibly a related issue to CVE-2006-4845.
Timeline
- First public exploit (EDB-4785)
- Published
Exploit prediction
3.69% chance of exploitation in the next 30 days, higher than 89% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-4785 TeamCalPro 3.1.000 - Multiple Local/Remote File Inclusions webapps, 2007-12-25
- securityfocus.com http://www.securityfocus.com/bid/27022 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 6.8 | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Classification
- Weakness
-
- CWE-94 Improper Control of Generation of Code
References
-
exploit-db.com
/exploits/4785
exploit
-
securityfocus.com
/bid/27022
vdb-entry, exploit
-
osvdb.org
/39813
vdb-entry
-
osvdb.org
/39821
vdb-entry
-
osvdb.org
/39809
vdb-entry
-
osvdb.org
/39811
vdb-entry
-
osvdb.org
/39820
vdb-entry
-
osvdb.org
/39806
vdb-entry
-
osvdb.org
/39808
vdb-entry
-
osvdb.org
/39826
vdb-entry
-
osvdb.org
/39805
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/39212
vdb-entry
-
osvdb.org
/39807
vdb-entry
-
osvdb.org
/39815
vdb-entry
-
osvdb.org
/39823
vdb-entry
-
osvdb.org
/39822
vdb-entry
-
osvdb.org
/39817
vdb-entry
-
osvdb.org
/39825
vdb-entry
-
osvdb.org
/39812
vdb-entry
-
osvdb.org
/39818
vdb-entry
-
osvdb.org
/39824
vdb-entry
-
osvdb.org
/39819
vdb-entry
-
osvdb.org
/39810
vdb-entry
-
osvdb.org
/39814
vdb-entry
-
osvdb.org
/39816
vdb-entry
Sources
- CVE List CVE-2007-6553
- NVD CVE-2007-6553
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.