PT-2007-3523 · Maran · Maran Php Forum

Dj7Xpl · Published 2007-04-24 · Updated 2017-10-11 · CVE-2007-2182

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Maran PHP Forum (affected versions not specified)

Description The issue concerns an unrestricted file upload vulnerability. This allows remote attackers to upload and execute arbitrary PHP files. The vulnerability can be exploited by adding a trailing %00 in a filename in the page parameter of the forum write.php file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2007-2182

Affected Products

Maran Php Forum

References · 6

• 🔥 https://exploit-db.com/exploits/3775 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-2182 · Security Note
• http://secunia.com/advisories/24968 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33802 · Note
• http://securityfocus.com/bid/23614 · Note
• http://vupen.com/english/advisories/2007/1493 · Note