Lucene search
HistorySep 20, 2007 - 9:17 p.m.
CVE-2007-5009
cve
php
remote file inclusion
vulnerability
phpbb plus
nvd
7.6 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.134 Low
EPSS
Percentile
95.6%
PHP remote file inclusion vulnerability in language/lang_german/lang_main_album.php in phpBB Plus 1.53, and 1.53a before 20070922, allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
| CPE | Name | Operator | Version |
|---|---|---|---|
| phpbb2:phpbb2_plus | phpbb2 phpbb2 plus | eq | 1.53 |
| phpbb2:phpbb2_plus | phpbb2 phpbb2 plus | eq | 1.53a |
Related
prion
prion
Remote file inclusion
2007-09-20 21:17:00
Remote file inclusion
2007-09-26 22:17:00
canvas
canvas
Immunity Canvas: PHPBBPLUS_INCLUDE
2007-09-20 21:17:00
cve
cve
CVE-2007-5100
2007-09-26 22:17:00
nessus
nessus
phpBB Multiple Module phpbb_root_path Parameter Remote File Inclusion
2006-05-04 00:00:00
7.6 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.134 Low
EPSS
Percentile
95.6%
Related for CVE-2007-5009