CVE-2007-5822
CVE-2007-5822
Direct static code injection vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to inject arbitrary PHP code into a certain file in regged/ via the username parameter in a Register action, possibly related to the register function in forumfunctions.php.
Affected products
n/a · n/apublic PoCs found — 1
cve_referencewww.exploit-db.com/exploits/4596unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
http://osvdb.org/45287http://securityreason.com/securityalert/3339https://exchange.xforce.ibmcloud.com/vulnerabilities/38227https://www.exploit-db.com/exploits/4596http://www.inj3ct-it.org/exploit/scribe.txthttp://www.securityfocus.com/archive/1/483183/100/0/threadedhttp://www.securityfocus.com/bid/26302http://www.vupen.com/english/advisories/2007/3746