CVE-2007-1968

CVE-2007-1968 describes a remote file inclusion vulnerability in the games.php component of Sam Crew MyBlog, affecting versions potentially from 1.0 to 1.6. This flaw allows unauthenticated remote attackers to execute arbitrary PHP code by injecting a malicious URL into the scoreid parameter. With a CVSS score of 6.8, it presents a moderate severity risk, enabling partial compromise of confidentiality, integrity, and availability with medium attack complexity. While not listed in CISA's KEV catalog, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.