CVE-2007-3431: Dagger - The Cutting Edge PHP remote file inclusion in cal.func.php

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 19 September 2026. Confidence: medium.

high priorityRemote unauthenticated code execution with public exploit code and very high EPSS, though the CVSS 2.0 base score is only 6.8 and the product is an old niche build.

What it is

cal.func.php in Valerio Capello Dagger - The Cutting Edge r23jan2007 passes the dir_edge_lang parameter into a PHP include without validation, allowing remote file inclusion. An attacker can point that parameter at a remote file and have arbitrary PHP code executed by the web server. The record is old (2007) and thin on affected-version detail beyond the r23jan2007 build.

Impact

Successful exploitation gives the attacker arbitrary PHP code execution in the context of the web server, which can lead to full compromise of the application and its host. The CVSS 2.0 vector rates partial confidentiality, integrity and availability impact.

Attack surface

Reachable over the network via HTTP requests to cal.func.php with a crafted dir_edge_lang parameter; no authentication is required per the AV:N/Au:N vector. No user interaction is indicated.

Exploitation

Not listed in CISA KEV, but EPSS is very high (0.707 probability, 99.36th percentile) and a public Exploit-DB entry (4097) exists, indicating known public exploit code.

What to do

• Patch or upgrade Dagger - The Cutting Edge to a build that validates the dir_edge_lang parameter; if no fixed release exists, remove or disable cal.func.php.
• Apply input validation to dir_edge_lang, restricting it to an allowlist of expected language values and rejecting URLs or path traversal.
• Disable allow_url_include and allow_url_fopen in php.ini to block remote file inclusion even if the parameter is abused.
• Isolate the affected application behind a WAF or reverse proxy that blocks external URLs in request parameters, and restrict outbound egress from the web server.

Detection

• Search web logs for requests to cal.func.php with dir_edge_lang containing http://, https://, ftp:// or other URL schemes.
• Monitor for outbound HTTP connections from the web server to unexpected external hosts, which may indicate remote include retrieval.
• Look for unexpected PHP files or webshells written under the web root and for anomalous child processes spawned by the web server user.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.