CVE-2007-1059 PHP remote file inclusion vulnerability in function.php in Ultimate Fun Book 1.02 allows remote attackers to execute arbitrary PHP code via a URL in the gbpfad parameter. NOTE: some sources mention "U...
MediumCVSS 6.8
EPSS 3.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
PHP remote file inclusion vulnerability in function.php in Ultimate Fun Book 1.02 allows remote attackers to execute arbitrary PHP code via a URL in the gbpfad parameter. NOTE: some sources mention "Ultimate Fun Board," but this appears to be an error.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ultimate fun book | = 1.02 | No fix listed |
References
- 33305 vdb-entry
- 24219 third-party-advisory vendor-advisory
- 22633 exploit vdb-entry
- ADV-2007-0675 vdb-entry
- ultimatefunbook-function-file-include(32584) vdb-entry
- 3336 exploit