Vulnerability record · CVE-2007-2142 · published 19 April 2007

CVE-2007-2142: Ajportal2php vulnerability

AAjportal2php · Ajportal2php

Multiple PHP remote file inclusion vulnerabilities in AjPortal2Php allow remote attackers to execute arbitrary PHP code via a URL in the PagePrefix parameter to (1) begin.inc.php, (2) connection.inc.php, (3) events.inc.php, (4) footer.inc.php, (5) header.inc.php, (6) menuleft.inc.php, or (7) pages.inc.php in includes/.

7.5 CVSS 2.0 High EPSS 9.7% · top 4.7%

7.5CVSS 2.0 base score

9.7%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

22References

16 Jun 2026Last modified by NVD

Description

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

AAjportal2php Ajportal2php

References

Link	Tags
http://osvdb.org/37565
http://osvdb.org/37566
http://osvdb.org/37567
http://osvdb.org/37568
http://osvdb.org/37569
http://osvdb.org/37570
http://osvdb.org/37571
http://www.securityfocus.com/bid/23525
http://www.vupen.com/english/advisories/2007/1428
https://exchange.xforce.ibmcloud.com/vulnerabilities/33703
https://www.exploit-db.com/exploits/3752
http://osvdb.org/37565
http://osvdb.org/37566
http://osvdb.org/37567
http://osvdb.org/37568
http://osvdb.org/37569
http://osvdb.org/37570
http://osvdb.org/37571
http://www.securityfocus.com/bid/23525
http://www.vupen.com/english/advisories/2007/1428
https://exchange.xforce.ibmcloud.com/vulnerabilities/33703
https://www.exploit-db.com/exploits/3752

Track CVE-2007-2142 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Source: NIST National Vulnerability Database (record CVE-2007-2142), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.