CVE-2007-3085

Multiple PHP remote file inclusion vulnerabilities in PBSite allow remote attackers to execute arbitrary PHP code via a URL in the (1) dbpath parameter to (a) useronline.php, (b) ucp.php, (c) setcookie.php, (d) sendpm.php, (e) search.php, (f) register.php, (g) profile.php, (h) post.php, (i) pmpshow.php, (j) pm.php, (k) ntopic.php, (l) nreply.php, (m) news.php, (n) memberslist.php, (o) logout.php, (p) login.php, (q) index.php, (r) help.php, (s) forum.php, (t) error.php, (u) editpost.php, (v) delpost.php, (w) delpm.php, (x) confirm.php, (y) board.php, (z) admin2.php, (aa) admin.php, or (bb) templates/pb/css/formstyles.php; or the (2) temppath parameter to (a) useronline.php, (c) setcookie.php, (e) search.php, (f) register.php, (h) post.php, (l) nreply.php, (m) news.php, (o) logout.php, (p) login.php, (q) index.php, (r) help.php, (s) forum.php, (t) error.php, (w) delpm.php, (x) confirm.php, or (y) board.php.

Link	Resource
http://securityreason.com/securityalert/2777
http://osvdb.org/38773
http://osvdb.org/38779
http://osvdb.org/38769
http://osvdb.org/38783
http://osvdb.org/38785
http://osvdb.org/38786
http://osvdb.org/38772
http://osvdb.org/38767
http://osvdb.org/38782
http://osvdb.org/38778
http://osvdb.org/38776
http://osvdb.org/38764
http://osvdb.org/38761
http://osvdb.org/38780
http://osvdb.org/38777
http://osvdb.org/38771
http://osvdb.org/38760
http://osvdb.org/38768
http://osvdb.org/38759
http://osvdb.org/38766
http://osvdb.org/38762
http://osvdb.org/38775
http://osvdb.org/38770
http://osvdb.org/38781
http://osvdb.org/38784
http://osvdb.org/38765
http://osvdb.org/38774
http://osvdb.org/38763
https://exchange.xforce.ibmcloud.com/vulnerabilities/34675
http://www.securityfocus.com/archive/1/470347/100/0/threaded
http://www.securityfocus.com/archive/1/470239/100/0/threaded

Configuration 1

cpe:2.3:a:pbsite:pbsite:*:*:*:*:*:*:*:*

---

Published : 2007-06-06 10:30

Updated : 2018-10-16 04:47

---

NVD link : CVE-2007-3085

Mitre link : CVE-2007-3085

No products.

NVD-CWE-Other