CVE-2007-3401

The CVE-2007-3401 entry details a PHP Remote File Inclusion in footer.inc.php of B1G b1gBB 2.24, exploitable via a URL in the tfooter parameter to execute arbitrary PHP code on remote systems. Affected component is the B1G b1gBB package; the vulnerability arises from unsafely including a URL-supp...

CVE-2007-3589

CVE-2007-3589 affects b1gbb 2.24.0. Multiple SQL injection vulnerabilities allow remote attackers to execute arbitrary SQL commands via the id parameter to showthread.php or showboard.php. Root cause: input handling in the id parameter enables SQL injection. Exploitation details are not provided ...

CVE-2007-3590

CVE-2007-3590 is a cross-site scripting (XSS) flaw in visitenkarte.php of b1gBB version 2.24.0. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the user parameter. No remediation or affected version details are provided beyond the 2.24.0 reference, and exploit...