Vulnerability record · CVE-2007-1458 · published 14 March 2007

CVE-2007-1458: Care2x vulnerability

Care2x · Care2x

Multiple PHP remote file inclusion vulnerabilities in CARE2X 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the root_path parameter to (1) inc_checkdate_lang.php, (2) inc_charset_fx.php, (3) inc_config_color.php, (4) inc_currency_set.php, (5) inc_db_makelink.php, (6) inc_diagnostics_report_fx.php, (7) inc_environment_global.php, (8) inc_front_chain_lang.php, (9) inc_init_crypt.php, (10) inc_load_copyrite.php, or (11) inc_news_save.php in include/; (12) diagnostics-report-index.php, (13) config_options_mascot.php, (14) barcode-labels.php, (15) chg-color.php, or (16) config_options_gui_template.php in main/; or unspecified other files.

6.8 CVSS 2.0 Medium EPSS 7.1% · top 6.0%

6.8CVSS 2.0 base score

7.1%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

44References, 2 tagged exploit

16 Jun 2026Last modified by NVD

Description

AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Care2x Care2x

References

Link	Tags
http://advisories.echo.or.id/adv/adv72-theday-2007.txt
http://secunia.com/advisories/24481	Vendor Advisory
http://www.osvdb.org/34045
http://www.osvdb.org/34046
http://www.osvdb.org/34047
http://www.osvdb.org/34048
http://www.osvdb.org/34049
http://www.osvdb.org/34050
http://www.osvdb.org/34051
http://www.osvdb.org/34052
http://www.osvdb.org/34053
http://www.osvdb.org/34054
http://www.osvdb.org/34055
http://www.osvdb.org/34056
http://www.osvdb.org/34057
http://www.osvdb.org/34058
http://www.osvdb.org/34059
http://www.osvdb.org/34060
http://www.securityfocus.com/archive/1/462808/100/0/threaded
http://www.securityfocus.com/bid/22951	Exploit
http://www.vupen.com/english/advisories/2007/0938
https://exchange.xforce.ibmcloud.com/vulnerabilities/32981
http://advisories.echo.or.id/adv/adv72-theday-2007.txt
http://secunia.com/advisories/24481	Vendor Advisory
http://www.osvdb.org/34045
http://www.osvdb.org/34046
http://www.osvdb.org/34047
http://www.osvdb.org/34048
http://www.osvdb.org/34049
http://www.osvdb.org/34050
http://www.osvdb.org/34051
http://www.osvdb.org/34052
http://www.osvdb.org/34053
http://www.osvdb.org/34054
http://www.osvdb.org/34055
http://www.osvdb.org/34056
http://www.osvdb.org/34057
http://www.osvdb.org/34058
http://www.osvdb.org/34059
http://www.osvdb.org/34060

Track CVE-2007-1458 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

5.0CVE-2007-1574Care2x vulnerabilityCARE2X 2.2, and possibly earlier, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the ph…EPSS 1.1%21 Mar 2007

Source: NIST National Vulnerability Database (record CVE-2007-1458), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.