PT-2007-2211 · Phpbb · Phpbb Ezboard Converter

Xoron · Published 2007-02-06 · Updated 2017-10-19 · CVE-2007-0761

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpBB ezBoard converter (ezconvert) version 0.2

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the ezconvert dir parameter. This is a result of a remote file inclusion vulnerability in the config.php file of the phpBB ezBoard converter.

Recommendations For version 0.2, consider restricting access to the ezconvert dir parameter to minimize the risk of exploitation. As a temporary workaround, avoid using the ezconvert dir parameter in the affected config.php file until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2007-0761

Affected Products

Phpbb Ezboard Converter

References · 7

• 🔥 https://exploit-db.com/exploits/3258 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-0761 · Security Note
• http://attrition.org/pipermail/vim/2007-February/001278.html · Note
• http://vupen.com/english/advisories/2007/0473 · Note
• http://xoron.info/bugs/ezconvert.txt · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32157 · Note
• http://osvdb.org/33645 · Note