Vulnerabilities > CVE-2005-1200 - Remote Security vulnerability in Az Bulletin Board 1.0.07A/1.0.07B/1.0.07C

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
azbb
exploit available
NVD
Published: 2005-05-02
Updated: 2017-07-11

Summary

PHP remote file inclusion vulnerability in main_index.php in AZ Bulletin Board (AZbb) 1.0.07a through 1.0.07c allows remote attackers to execute arbitrary PHP code by modifying the (1) dir_src or (2) abs_layer parameter to reference a URL on a remote web server that contains the code.

Vulnerable Configurations

Part Description Count
Application
Azbb
3

Exploit-Db

descriptionAZBB < 1.0.07d - Multiple Vulnerabilities. CVE-2005-1200,CVE-2005-1201. Webapps exploit for PHP platform
idEDB-ID:43823
last seen2018-01-24
modified2015-04-19
published2015-04-19
reporterExploit-DB
sourcehttps://www.exploit-db.com/download/43823/
titleAZBB < 1.0.07d - Multiple Vulnerabilities

References