CVE-2007-0584: g-neric PHP framework remote file inclusion in membreManager.php

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 19 September 2026. Confidence: medium.

high priorityRemote unauthenticated code execution with public exploit code and a very high EPSS score, though the product is old and no KEV listing exists.

What it is

The g-neric PHP Generic Library & Framework contains a remote file inclusion flaw in membres/membreManager.php, where the include_path parameter is used to load a remote URL. An attacker can point that parameter at a server they control and cause the application to execute arbitrary PHP code. The record does not list affected version ranges, so the exact vulnerable releases are unknown.

Impact

Successful exploitation gives the attacker arbitrary PHP code execution in the context of the web server, which typically leads to full compromise of the application and its data.

Attack surface

The flaw is reachable over the network through HTTP requests to membres/membreManager.php with a crafted include_path value. The CVSS vector AV:N/AC:L/Au:N indicates no authentication and no user interaction are required.

Exploitation

CISA KEV does not list this CVE, but EPSS is very high at roughly 0.70 (99th percentile) and a SecurityFocus reference is tagged Exploit, with an Exploit-DB entry also present, indicating public exploit code exists.

What to do

• Apply the vendor fix or upgrade to a non-vulnerable release of g-neric; no fixed version is identified in this record, so confirm with the vendor.
• Disable allow_url_include and allow_url_fopen in php.ini so include() cannot fetch remote URLs.
• Validate and whitelist the include_path parameter, rejecting any value containing a URL scheme or path traversal.
• If the component is unused, remove or block access to membres/membreManager.php at the web server.
• Run the PHP application with least privilege and restrict outbound network access from the web server.

Detection

• Search web server logs for requests to membres/membreManager.php with include_path values containing http://, https://, ftp:// or other URL schemes.
• Monitor for outbound HTTP connections originating from the PHP/web server process to unfamiliar hosts.
• Look for unexpected PHP files or webshells written under the web root and for anomalous child processes spawned by the web server.
• Alert on repeated 200 responses to membreManager.php from single source IPs, which may indicate scanning or exploitation attempts.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.