PT-2007-4673 · B1G · B1G B1Gbb

Rf7Awy · Published 2007-06-26 · Updated 2017-10-11 · CVE-2007-3401

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions B1G b1gBB version 2.24

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the tfooter parameter in the footer.inc.php file.

Recommendations For B1G b1gBB version 2.24, consider restricting access to the footer.inc.php file or validating the tfooter parameter to prevent remote file inclusion attacks. As a temporary workaround, avoid using the tfooter parameter in the affected file until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2007-3401

Affected Products

B1G B1Gbb

References · 7

• 🔥 https://exploit-db.com/exploits/4102 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-3401 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35035 · Note
• http://secunia.com/advisories/25837 · Note
• http://vupen.com/english/advisories/2007/2321 · Note
• http://osvdb.org/36291 · Note
• http://securityfocus.com/bid/24624 · Note