CVE-2007-4636

Summary

Multiple PHP remote file inclusion vulnerabilities in phpBG 0.9.1 allow remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter to (1) intern/admin/other/backup.php, (2) intern/admin/, (3) intern/clan/member_add.php, (4) intern/config/key_2.php, or (5) intern/config/forum.php.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://www.exploit-db.com/exploits/4340
• http://www.securityfocus.com/bid/25486
• http://osvdb.org/38432
• http://osvdb.org/38433
• http://osvdb.org/38430
• http://osvdb.org/38431
• http://osvdb.org/38429
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36348

References

• https://www.exploit-db.com/exploits/4340
• http://www.securityfocus.com/bid/25486
• http://osvdb.org/38432
• http://osvdb.org/38433
• http://osvdb.org/38430
• http://osvdb.org/38431
• http://osvdb.org/38429
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36348

• ←Previous
• Next→