high7.5Public exploit code
CVE-2005-2633
Multiple PHP file inclusion vulnerabilities in (1) admin_o.php, (2) board_o.php, (3) dev_o.php, (4) file_o.php or (5) tech_o.php in PHPTB Topic Board 2.0 and e…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHPTB Topic Board 2.0 - 'tech_o.php?absolutepath' Remote File Inclusion2005-08-17 · webapps · php · Verified
- PHPTB Topic Board 2.0 - 'file_o.php?absolutepath' Remote File Inclusion2005-08-17 · webapps · php · Verified
- PHPTB Topic Board 2.0 - 'dev_o.php?absolutepath' Remote File Inclusion2005-08-17 · webapps · php · Verified
- PHPTB Topic Board 2.0 - 'board_o.php?absolutepath' Remote File Inclusion2005-08-17 · webapps · php · Verified
- PHPTB Topic Board 2.0 - 'admin_o.php?absolutepath' Remote File Inclusion2005-08-17 · webapps · php · Verified
Impact
Multiple PHP file inclusion vulnerabilities in (1) admin_o.php, (2) board_o.php, (3) dev_o.php, (4) file_o.php or (5) tech_o.php in PHPTB Topic Board 2.0 and earlier allow remote attackers to execute arbitrary PHP code via the absolutepath parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phptb | Topic Boards | through 2.0 |