PT-2007-3571 · Punbb · Punbb

Darkfig · Published 2007-04-25 · Updated 2018-10-16 · CVE-2007-2234

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PunBB versions 1.2.14 and earlier

Description The issue arises from improper handling of a disabled ini get function when checking the register globals setting in include/common.php. This allows remote attackers to register global parameters. An example of exploitation is an SQL injection attack on the search id parameter to "search.php".

Recommendations For PunBB versions 1.2.14 and earlier, consider disabling the register globals setting to prevent global parameter registration until a proper fix is applied. As a temporary workaround, restrict access to the "search.php" endpoint to minimize the risk of SQL injection attacks. Avoid using the search id parameter in the affected endpoint until the issue is resolved.

Fix

Related Identifiers

CVE-2007-2234

Affected Products

Punbb

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2007-2234 · Security Note
• http://securityfocus.com/archive/1/465400/100/100/threaded · Note
• http://dev.punbb.org/changeset/933 · Note
• http://securityfocus.com/archive/1/465338/100/100/threaded · Note
• http://securityreason.com/securityalert/2613 · Note
• http://acid-root.new.fr/advisories/13070411.txt · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2234 · Note