CVE-2007-4439

PHP remote file inclusion vulnerability in popup_window.php in Squirrelcart 1.x.x and earlier...

7.5 HighPublic exploit

CVE-2007-4439 is a high vulnerability (CVSS 7.5) in Lighthouse Development Squirrelcart, published August 21, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.44%, the 84th percentile. No source names a fixed version.

PHP remote file inclusion vulnerability in popup_window.php in Squirrelcart 1.x.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the site_isp_root parameter, probably related to cart.php.

Exploit likelihood

2.44%Down 1.7 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Record: CVE-2007-4439
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2007-4439
Updated: 2026-11-02

EUVDEUVD-2007-4422 No score

Record: EUVD-2007-4422
Updated: 2026-11-03

GitHub AdvisoriesGHSA-qmjc-xpgx-gfcq No score

PHP remote file inclusion vulnerability in popup_window.php in Squirrelcart 1.x.x and earlier...

Record: GHSA-qmjc-xpgx-gfcq
Updated: 2026-11-02

Affected products

lighthouse development squirrelcart

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Squirrelcart 1.x - 'cart.php' Remote File Inclusion	2007-08-19

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD