CVE-2007-2941 Multiple PHP remote file inclusion vulnerabilities in the creator in vBulletin Google Yahoo Site Map (vBGSiteMap) 2.41 for vBulletin allow remote attackers to execute arbitrary PHP code via a URL in t...
HighCVSS 7.5
EPSS 7.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple PHP remote file inclusion vulnerabilities in the creator in vBulletin Google Yahoo Site Map (vBGSiteMap) 2.41 for vBulletin allow remote attackers to execute arbitrary PHP code via a URL in the base parameter to (1) vbgsitemap/vbgsitemap-config.php or (2) vbgsitemap/vbgsitemap-vbseo.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| michael brandon vbgsitemap | = 2.41 | No fix listed |
References
- 38084 vdb-entry
- 38085 vdb-entry
- 24169 vdb-entry
- vbgsitemap-base-file-include(34531) vdb-entry
- 3990 exploit