CVE-2007-1472

N/A Unknown
Published: March 16, 2007 Modified: April 23, 2026
View on NVD

Description

Variable overwrite vulnerability in groupit/base/groupit.start.inc in Groupit 2.00b5 allows remote attackers to conduct remote file inclusion attacks and execute arbitrary PHP code via arguments that are written to $_GLOBALS, as demonstrated using a URL in the c_basepath parameter to (1) content.php, (2) userprofile.php, (3) password.php, (4) dispatch.php, and (5) deliver.php in html/, and possibly (6) load.inc.php and related files.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://advisories.echo.or.id/adv/adv75-theday-2007.txt
Source: cve@mitre.org
http://osvdb.org/34476
Source: cve@mitre.org
http://securityreason.com/securityalert/2428
Source: cve@mitre.org
http://www.attrition.org/pipermail/vim/2007-March/001435.html
Source: cve@mitre.org
Exploit
http://www.attrition.org/pipermail/vim/2007-March/001436.html
Source: cve@mitre.org
http://www.securityfocus.com/archive/1/462918/100/0/threaded
Source: cve@mitre.org
http://www.vupen.com/english/advisories/2007/0995
Source: cve@mitre.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/33000
Source: cve@mitre.org
https://www.exploit-db.com/exploits/3486
Source: cve@mitre.org
http://advisories.echo.or.id/adv/adv75-theday-2007.txt
Source: af854a3a-2127-422b-91ae-364da2661108
http://osvdb.org/34476
Source: af854a3a-2127-422b-91ae-364da2661108
http://securityreason.com/securityalert/2428
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.attrition.org/pipermail/vim/2007-March/001435.html
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
http://www.attrition.org/pipermail/vim/2007-March/001436.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/462918/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2007/0995
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/33000
Source: af854a3a-2127-422b-91ae-364da2661108
https://www.exploit-db.com/exploits/3486
Source: af854a3a-2127-422b-91ae-364da2661108

18 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
13.6%
94th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-94

Affected Vendors

t-systems_solutions_for_research_gmbh

Related CVEs

CVE-2026-8696 7.5
CVE-2026-45672 8.8
CVE-2026-45402 8.1
CVE-2026-45401 8.5
CVE-2026-45400 8.5