CVE-2007-4636 Multiple PHP remote file inclusion vulnerabilities in phpBG 0.9.1 allow remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter to (1) intern/admin/other/backup.php, (2) inte...

HighCVSS 7.5 EPSS 71.1%

Published: 2007-09-01 02:00
Updated: 2026-06-17 01:44
Exploit status: No public exploit known

Description

Multiple PHP remote file inclusion vulnerabilities in phpBG 0.9.1 allow remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter to (1) intern/admin/other/backup.php, (2) intern/admin/, (3) intern/clan/member_add.php, (4) intern/config/key_2.php, or (5) intern/config/forum.php.

Affected products

Product	Affected versions	Fixed in
phpbg	= 0.9.1	No fix listed

References

38429 vdb-entry
38430 vdb-entry
38431 vdb-entry
38432 vdb-entry
38433 vdb-entry
25486 vdb-entry
phpbg-rootdir-file-include(36348) vdb-entry
4340 exploit

CVSS v2.0

7.5 High

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Weakness & likelihood

EPSS (exploitation probability, 30 days): 71.06% (percentile 99.4)
CWE: CWE-20

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

phpBG 0.9.1 - 'rootdir' Remote File Inclusion Exploit · Exploit Database (OffSec) · 2007-08-29