CVE-2007-5178
CVE-2007-5178
contrib/mx_glance_sdesc.php in the mx_glance 2.3.3 module for mxBB places a critical security check within a comment because of a missing comment delimiter, which allows remote attackers to conduct remote file inclusion attacks and execute arbitrary PHP code via a URL in the mx_root_path parameter. NOTE: some sources incorrectly state that phpbb_root_path is the affected parameter.
Affected products
n/a · n/apublic PoCs found — 1
cve_referencewww.exploit-db.com/exploits/4470unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
http://osvdb.org/37400http://secunia.com/advisories/27011https://exchange.xforce.ibmcloud.com/vulnerabilities/36867https://www.exploit-db.com/exploits/4470http://www.attrition.org/pipermail/vim/2007-October/001807.htmlhttp://www.attrition.org/pipermail/vim/2007-October/001808.htmlhttp://www.securityfocus.com/bid/25866http://www.vupen.com/english/advisories/2007/3326