CVE-2007-5822

2007-11-0519:00:00

mitre

www.cve.org

code injection

forum

remote attack

php

security vulnerability

AI Score

7.3

Confidence

High

EPSS

0.022

Percentile

89.7%

JSON

Direct static code injection vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to inject arbitrary PHP code into a certain file in regged/ via the username parameter in a Register action, possibly related to the register function in forumfunctions.php.