CVE-2008-5090

Electron Inc. Advanced Electron Forum before 1.0.7 allows remote attackers to execute arbitrary PHP code via PHP code embedded in bbcode in the email parameter, which is processed by the preg_replace function with the eval switch.

Link	Resource
http://www.gulftech.org/?node=research&article_id=00131-09202008
http://secunia.com/advisories/31978	Vendor Advisory
http://www.securityfocus.com/bid/31268	Exploit
http://www.anelectron.com/board/index.php?tid=3282	Vendor Advisory
http://securityreason.com/securityalert/4598
https://exchange.xforce.ibmcloud.com/vulnerabilities/45270
https://www.exploit-db.com/exploits/6499
http://www.securityfocus.com/archive/1/496552/100/0/threaded

Configuration 1

cpe:2.3:a:anelectron:advanced_electron_forum:*:*:*:*:*:*:*:* cpe:2.3:a:anelectron:advanced_electron_forum:1.0.2:*:*:*:*:*:*:* cpe:2.3:a:anelectron:advanced_electron_forum:1.0.5:*:*:*:*:*:*:* cpe:2.3:a:anelectron:advanced_electron_forum:1.0.3:*:*:*:*:*:*:* cpe:2.3:a:anelectron:advanced_electron_forum:1.0.1:*:*:*:*:*:*:* cpe:2.3:a:anelectron:advanced_electron_forum:1.0.4:*:*:*:*:*:*:*

---

Published : 2008-11-14 07:20

Updated : 2018-10-11 08:54

---

NVD link : CVE-2008-5090

Mitre link : CVE-2008-5090

No products.

CWE-94