Описание
Direct static code injection vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to inject arbitrary PHP code into a certain file in regged/ via the username parameter in a Register action, possibly related to the register function in forumfunctions.php.
Direct static code injection vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to inject arbitrary PHP code into a certain file in regged/ via the username parameter in a Register action, possibly related to the register function in forumfunctions.php.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2007-5822
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38227
- https://www.exploit-db.com/exploits/4596
- http://osvdb.org/45287
- http://securityreason.com/securityalert/3339
- http://www.inj3ct-it.org/exploit/scribe.txt
- http://www.securityfocus.com/archive/1/483183/100/0/threaded
- http://www.securityfocus.com/bid/26302
- http://www.vupen.com/english/advisories/2007/3746
Связанные уязвимости
Direct static code injection vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to inject arbitrary PHP code into a certain file in regged/ via the username parameter in a Register action, possibly related to the register function in forumfunctions.php.