CVE-2007-2422 - CVE House
Back to Database
Status published Unknown CVE-2007-2422

Multiple PHP remote file inclusion vulnerabilities in Modules Builder (modbuild)...

Vulnerability Description

Multiple PHP remote file inclusion vulnerabilities in Modules Builder (modbuild) 4.1 for Comdev One Admin allow remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter to (1) config-bak.php or (2) config.php. NOTE: CVE disputes this vulnerability because the unmodified scripts set the applicable variable to the empty string; reasonable modified copies would use a fixed pathname string

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-2422

Credits & Attribution

No credits recorded in the NVD database.

References

More from comdev

View All →
CVE-2018-6368
SQL Injection exists in the JomEstate PRO through 3.7 component...
Critical 9.8
CVE-2008-6250
SQL injection vulnerability in Comdev Web Blogger 4.1.3 and earlier...
Medium 6.8
CVE-2008-1872
SQL injection vulnerability in home.news.php in Comdev News Publisher 4.1.2...
High 7.5
CVE-2007-3084
PHP remote file inclusion vulnerability in sampleblogger.php in Comdev Web...
High 7.5
CVE-2007-3081
PHP remote file inclusion vulnerability in sampleecommerce.php in Comdev eCommerce...
High 7.5

Affected Vendor

Affected Software

modules builder
Vulnerable Versions:
4.1

Timeline

Official Publish: May 2nd, 2007
Last Modified: January 17th, 2025
Added to House: July 18th, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.