CVE-2007-4906 PHP remote file inclusion vulnerability in tasks/send_queued_emails.php in NuclearBB Alpha 2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the r...
MediumCVSS 6.8
EPSS 38.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in tasks/send_queued_emails.php in NuclearBB Alpha 2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nuclearbb | = alpha_2 | No fix listed |
References
- 38978 vdb-entry
- 3142 third-party-advisory
- 20070911 NuclearBB Alpha 2 Remote File Inclusion mailing-list
- nuclearbb-sendqueuedemails-file-include(36556) vdb-entry
- 4395 exploit