PatchTheCVECVE-2007-6652: cpie.php in XCMS 1.83 and earlier sends a redirect to the web browser but does not exit, which allows remote a
CVE-2007-6652 is a high-severity flaw (CVSS 7.5) affecting xcms. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
cpie.php in XCMS 1.83 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct direct static code injection attacks and execute arbitrary code via the testo_0 parameter in a cpie admin action to index.php, which writes to dati/generali/footer.dtb (aka the XCMS footer).
Why this priority
- High severity
- EPSS top 9%: very likely to be exploited
- Public exploit reference
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.5 (High) |
| EPSS exploit chance | 4.2% (top 9%) |
| CISA exploited list | No |
| Weakness | CWE-94 |
| Published | 2008-01-04 |
| Last modified | 2026-06-16 |
Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Public exploits and detection
Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.
- Exploit-DB: XCMS 1.83 - Remote Command Execution
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2007-6652?
xcms: upgrade to newer than 1.83. Exact commands for each OS are on this page.
Is CVE-2007-6652 being exploited?
CVE-2007-6652 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2007-6652 affect?
CVE-2007-6652 affects xcms. Severity is high (CVSS 7.5). cpie.php in XCMS 1.83 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct direct static code injection attacks and execute arbitrary code via the testo_0 parameter in a cpie admin acti
How urgent is CVE-2007-6652?
Priority 54/100. High severity; EPSS top 9%: very likely to be exploited; Public exploit reference
Software pages
Related CVEs
- CVE-2025-15110 MEDIUM 4.7 DOWNGRADE A vulnerability has been found in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261
- CVE-2007-6604 MEDIUM 5.0 DOWNGRADE Multiple directory traversal vulnerabilities in index.php in XCMS 1.82 and earlier allow remote attackers to r
- CVE-2007-5060 MEDIUM 4.3 MITIGATE Cross-site request forgery (CSRF) vulnerability in the cpass functionality in an admin action in index.php in
- CVE-2007-3523 MEDIUM 6.4 DOWNGRADE Multiple directory traversal vulnerabilities in Module/Galerie.php in XCMS 1.1 allow remote attackers to inclu