CVE-2007-1987

CVE-2007-1987 describes multiple remote file inclusion vulnerabilities in PHPEcho CMS 2.0, potentially allowing remote attackers to execute arbitrary PHP code. Specifically, it references issues with the _plugin_file parameter in smarty/internals/core.load_pulgins.php and the root_path parameter in index.php, though the CVE disputes the validity of both. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low access complexity, and potential for partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, suggesting it is not a widely exploited or discussed threat.