PT-2007-4673 · B1G · B1G B1Gbb

Rf7Awy · Publicado 2007-06-26 · Atualizado 2017-10-11 · CVE-2007-3401

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions B1G b1gBB version 2.24

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the tfooter parameter in the footer.inc.php file.

Recommendations For B1G b1gBB version 2.24, consider restricting access to the footer.inc.php file or validating the tfooter parameter to prevent remote file inclusion attacks. As a temporary workaround, avoid using the tfooter parameter in the affected file until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2007-3401

Produtos afetados

B1G B1Gbb

Referências · 7

• 🔥 https://exploit-db.com/exploits/4102 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-3401 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35035 · Nota
• http://secunia.com/advisories/25837 · Nota
• http://vupen.com/english/advisories/2007/2321 · Nota
• http://osvdb.org/36291 · Nota
• http://securityfocus.com/bid/24624 · Nota