CVE-2008-3354

Multiple PHP remote file inclusion vulnerabilities in the Newbb Plus (newbb_plus) module 0.93 in RunCMS 1.6.1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) bbPath[path] parameter to votepolls.php and the (2) bbPath[root_theme] parameter to config.php, different vectors than CVE-2006-0659. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Link	Resource
http://www.securityfocus.com/bid/30331/exploit	Exploit
http://www.securityfocus.com/bid/30331	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/43969

Configuration 1

cpe:2.3:a:runcms:newbb_plus_module:0.93:*:*:*:*:*:*:* cpe:2.3:a:runcms:runcms:1.6.1:*:*:*:*:*:*:*

---

Published : 2008-07-28 05:41

Updated : 2017-08-08 01:31

---

NVD link : CVE-2008-3354

Mitre link : CVE-2008-3354

Newbb Plus Module

Runcms

CWE-94