PT-2007-2211 · Phpbb · Phpbb Ezboard Converter

Xoron · Publicado 2007-02-06 · Atualizado 2017-10-19 · CVE-2007-0761

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpBB ezBoard converter (ezconvert) version 0.2

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the ezconvert dir parameter. This is a result of a remote file inclusion vulnerability in the config.php file of the phpBB ezBoard converter.

Recommendations For version 0.2, consider restricting access to the ezconvert dir parameter to minimize the risk of exploitation. As a temporary workaround, avoid using the ezconvert dir parameter in the affected config.php file until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2007-0761

Produtos afetados

Phpbb Ezboard Converter

Referências · 7

• 🔥 https://exploit-db.com/exploits/3258 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-0761 · Nota de Segurança
• http://attrition.org/pipermail/vim/2007-February/001278.html · Nota
• http://vupen.com/english/advisories/2007/0473 · Nota
• http://xoron.info/bugs/ezconvert.txt · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32157 · Nota
• http://osvdb.org/33645 · Nota