Vulnerabilities > CVE-2007-0680 - Remote File Include vulnerability in PHPbb Tweaked PHPbb Tweaked 1

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
phpbb-tweaked
exploit available
NVD
Published: 2007-02-03
Updated: 2017-10-19

Summary

PHP remote file inclusion vulnerability in includes/functions.php in Phpbb Tweaked 3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

Vulnerable Configurations

Part Description Count
Application
Phpbb_Tweaked
2

Exploit-Db

descriptionPhpbb Tweaked <= 3 (phpbb_root_path) Remote Inclusion Vulnerability. CVE-2007-0680. Webapps exploit for php platform
fileexploits/php/webapps/3235.txt
idEDB-ID:3235
last seen2016-01-31
modified2007-01-31
platformphp
port
published2007-01-31
reporterMehmet Ince
sourcehttps://www.exploit-db.com/download/3235/
titlePhpbb Tweaked <= 3 phpbb_root_path Remote Inclusion Vulnerability
typewebapps

References