Vulnerabilities > CVE-2007-3935 - Remote Security vulnerability in PHPbb Supanav 1.0.0

047910
CVSS 9.3 - CRITICAL
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
phpbb
critical
exploit available

Summary

PHP remote file inclusion vulnerability in link_main.php in the SupaNav 1.0.0 module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

Vulnerable Configurations

Part Description Count
Application
Phpbb
1

Exploit-Db

descriptionphpBB Module SupaNav 1.0.0 (link_main.php) RFI Vulnerability. CVE-2007-3935. Webapps exploit for php platform
fileexploits/php/webapps/4197.txt
idEDB-ID:4197
last seen2016-01-31
modified2007-07-18
platformphp
port
published2007-07-18
reporterbd0rk
sourcehttps://www.exploit-db.com/download/4197/
titlephpBB Module SupaNav 1.0.0 link_main.php RFI Vulnerability
typewebapps