← Vulnerability feed

Vulnerability record · CVE-2007-0150 · published 9 January 2007

CVE-2007-0150: Dayfox designs dayfox blog vulnerability

DDayfox Designs · Dayfox Blog

Multiple PHP remote file inclusion vulnerabilities in index.php in Dayfox Blog allow remote attackers to execute arbitrary PHP code via a URL in the (1) page, (2) subject, and (3) q parameters.

7.5 CVSS 2.0 High EPSS 1.8% · top 22.7%
7.5CVSS 2.0 base score
1.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
12References
16 Jun 2026Last modified by NVD

Description

Multiple PHP remote file inclusion vulnerabilities in index.php in Dayfox Blog allow remote attackers to execute arbitrary PHP code via a URL in the (1) page, (2) subject, and (3) q parameters.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://osvdb.org/31259
http://secunia.com/advisories/23661
http://securityreason.com/securityalert/2117
http://www.securityfocus.com/archive/1/456212/100/0/threaded
http://www.vupen.com/english/advisories/2007/0099
https://exchange.xforce.ibmcloud.com/vulnerabilities/31336
http://osvdb.org/31259
http://secunia.com/advisories/23661
http://securityreason.com/securityalert/2117
http://www.securityfocus.com/archive/1/456212/100/0/threaded
http://www.vupen.com/english/advisories/2007/0099
https://exchange.xforce.ibmcloud.com/vulnerabilities/31336

Track CVE-2007-0150 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2008-3564Dayfox designs dayfox blog path traversal vulnerabilityMultiple directory traversal vulnerabilities in index.php in Dayfox Blog 4 allow remote attackers to include and execute arbitrary local files via a …EPSS 2.5%7.5CVE-2006-5183Dayfox designs dayfox blog vulnerabilityMultiple PHP remote file inclusion vulnerabilities in Dayfox Designs Dayfox Blog 2.0 allow remote attackers to execute arbitrary PHP code via a URL i…EPSS 1.5%7.5CVE-2006-2522Dayfox designs dayfox blog vulnerabilityDayfox Blog 2.0 and earlier stores user credentials in edit/slog_users.txt under the web document root with insufficient access control, which allows…EPSS 1.9%6.8CVE-2007-1525Dayfox designs dayfox blog vulnerabilityDirect static code injection vulnerability in postpost.php in Dayfox Blog (dfblog) 4 allows remote attackers to execute arbitrary PHP code via the ca…EPSS 37%

Source: NIST National Vulnerability Database (record CVE-2007-0150), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.