Skip to content

CVE-2007-5915

Directory traversal vulnerability in index.php in phphelpdesk 0.6.16 allows remote attackers to...

6.8 MediumPublic exploit

CVE-2007-5915 is a medium vulnerability (CVSS 6.8) in Phphelpdesk, published November 10, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.81%, the 78th percentile. No source names a fixed version.

Directory traversal vulnerability in index.php in phphelpdesk 0.6.16 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the whattodo parameter.

Exploit likelihood

1.81%Down 2.4 points since Feb 4, 2022

What each source reports

NVD Score used 6.8

Directory traversal vulnerability in index.php in phphelpdesk 0.6.16 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the whattodo parameter.

Record: CVE-2007-5915
CVSS 2.0: 6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness: CWE-22
Updated: 2026-11-02

CVE List No score

Directory traversal vulnerability in index.php in phphelpdesk 0.6.16 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the whattodo parameter.

Record: CVE-2007-5915
Updated: 2026-11-02

EUVDEUVD-2007-5885 No score

Directory traversal vulnerability in index.php in phphelpdesk 0.6.16 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the whattodo parameter.

Record: EUVD-2007-5885
Updated: 2026-11-03

GitHub AdvisoriesGHSA-fcm3-whc3-3xr7 No score

Directory traversal vulnerability in index.php in phphelpdesk 0.6.16 allows remote attackers to...

Directory traversal vulnerability in index.php in phphelpdesk 0.6.16 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the whattodo parameter.

Record: GHSA-fcm3-whc3-3xr7
Weakness: CWE-22
Updated: 2026-11-02

Affected products

phphelpdesk

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	PHP Helpdesk 0.6.16 - 'index.php' Local File Inclusion	2007-11-03

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	aliases, exploits, facts, references, title	Exploit-DB, GitHub Advisories
2026-11-02	created	CVE List, NVD

References