CVE-2007-4636 | BDVDB-2026-26124 Detail

Description#

Multiple PHP remote file inclusion vulnerabilities in phpBG 0.9.1 allow remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter to (1) intern/admin/other/backup.php, (2) intern/admin/, (3) intern/clan/member_add.php, (4) intern/config/key_2.php, or (5) intern/config/forum.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.exploit-db.com/exploits/4340
http://www.securityfocus.com/bid/25486
http://osvdb.org/38432
http://osvdb.org/38433
http://osvdb.org/38430
http://osvdb.org/38431
http://osvdb.org/38429
https://exchange.xforce.ibmcloud.com/vulnerabilities/36348

Exploit#

https://www.exploit-db.com/exploits/4340

History#

Version 12007-08-31Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.