Every CVESearch/Get API key

CVE-2007-4101

Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote attackers to...

6.8 MediumPublic exploit

CVE-2007-4101 is a medium vulnerability (CVSS 6.8) in Global Centre Aplomb Poll, published July 31, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.91%, the 87th percentile. No source names a fixed version.

Severity
6.8 MediumCVSS 2.0, NVD
Exploit chance
2.91%EPSS, 87th percentile
Exploitation
None known3 public exploits
Fixed in
No fix listedNo source names one

Description

Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote attackers to execute arbitrary PHP code via the Madoa parameter to (1) index.php, (2) vote.php, and (3) admin.php.

Exploit likelihood

2.91%Down 3.9 points since Feb 4, 2022
90%50%10%1%

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

What each source reports

NVD Score used6.8

Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote attackers to execute arbitrary PHP code via the Madoa parameter to (1) index.php, (2) vote.php, and (3) admin.php.

Record
CVE-2007-4101
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE ListNo score

Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote attackers to execute arbitrary PHP code via the Madoa parameter to (1) index.php, (2) vote.php, and (3) admin.php.

Record
CVE-2007-4101
Updated
2026-11-02
EUVDEUVD-2007-4085No score

Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote attackers to execute arbitrary PHP code via the Madoa parameter to (1) index.php, (2) vote.php, and (3) admin.php.

Record
EUVD-2007-4085
Updated
2026-11-03
GitHub AdvisoriesGHSA-3jjg-rmhv-pfxwNo score

Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote attackers to...

Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote attackers to execute arbitrary PHP code via the Madoa parameter to (1) index.php, (2) vote.php, and (3) admin.php.

Record
GHSA-3jjg-rmhv-pfxw
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
aliases, exploits, facts, references, titleExploit-DB, GitHub Advisories
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open