CVE-2007-3370

EPSS 74.5%

Multiple PHP remote file inclusion vulnerabilities in Sun Board 1.00.00 Alpha allow remote attackers to execute arbitrary PHP code via a URL in (1) the sunPath parameter to include.php or (2) the dir parameter to skin/board/default/doctype.php.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4091unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/36281 http://osvdb.org/36282 https://exchange.xforce.ibmcloud.com/vulnerabilities/35006 https://www.exploit-db.com/exploits/4091 http://www.securityfocus.com/bid/24588 http://www.vupen.com/english/advisories/2007/2307