CVE-2007-2676
PHP remote file inclusion vulnerability in skins/header.php in Open Translation Engine (OTE) 0.7...
PHP remote file inclusion vulnerability in skins/header.php in Open Translation Engine (OTE) 0.7.8 allows remote attackers to execute arbitrary PHP code via a URL in the ote_home parameter.
Exploit likelihood
What each source reports
NVD Score used
PHP remote file inclusion vulnerability in skins/header.php in Open Translation Engine (OTE) 0.7.8 allows remote attackers to execute arbitrary PHP code via a URL in the ote_home parameter.
- Record
CVE-2007-2676- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
PHP remote file inclusion vulnerability in skins/header.php in Open Translation Engine (OTE) 0.7.8 allows remote attackers to execute arbitrary PHP code via a URL in the ote_home parameter.
- Record
CVE-2007-2676- Updated
- 2026-11-02
EUVDEUVD-2007-2668 No score
PHP remote file inclusion vulnerability in skins/header.php in Open Translation Engine (OTE) 0.7.8 allows remote attackers to execute arbitrary PHP code via a URL in the ote_home parameter.
- Record
EUVD-2007-2668- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4xh7-8hqg-hhwm No score
PHP remote file inclusion vulnerability in skins/header.php in Open Translation Engine (OTE) 0.7...
PHP remote file inclusion vulnerability in skins/header.php in Open Translation Engine (OTE) 0.7.8 allows remote attackers to execute arbitrary PHP code via a URL in the ote_home parameter.
- Record
GHSA-4xh7-8hqg-hhwm- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Open Translation Engine (OTE) 0.7.8 - 'header.php?ote_home' Remote File Inclusion | 2007-05-03 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2676 is a high vulnerability (CVSS 7.5) in Open Translation Engine Translation Engine, published May 14, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 70.6%, the 99th percentile. No source names a fixed version.
References
exploit-db.com/exploits/3838
osvdb.org/35591
securityfocus.com/bid/23793
attrition.org/pipermail/vim/2007-May/001585.html
secunia.com/advisories/25146
exchange.xforce.ibmcloud.com/vulnerabilities/34053
vupen.com/english/advisories/2007/1650
nvd.nist.gov/vuln/detail/CVE-2007-2676
github.com/advisories/GHSA-4xh7-8hqg-hhwm