CVE-2007-1477

CVE-2007-1477 describes a directory traversal vulnerability in PHP Point Of Sale for osCommerce 1.1, allowing remote attackers to include and execute arbitrary local files by manipulating the cfg_language parameter. This vulnerability carries a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability impacts. Despite its severity, there is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage, suggesting it is not a widely exploited or discussed threat.