medium6.8Public exploit code
CVE-2007-1934
Directory traversal vulnerability in member.php in the eBoard 1.0.7 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files vi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP-Nuke Module eBoard 1.0.7 - GLOBALS[name] Local File Inclusion2007-04-08 · webapps · php · Verified
Impact
Directory traversal vulnerability in member.php in the eBoard 1.0.7 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the GLOBALS[name] parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Php-Nuke | Eboard Module | Version 1.0.7 |
References
- NVD record
- CVE.org record
- http://osvdb.org/34806
- http://secunia.com/advisories/24806
- http://www.securityfocus.com/bid/23365
- http://www.vupen.com/english/advisories/2007/1301
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33493
- https://www.exploit-db.com/exploits/3683
- http://osvdb.org/34806
- http://secunia.com/advisories/24806
- http://www.securityfocus.com/bid/23365
- http://www.vupen.com/english/advisories/2007/1301
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33493
- https://www.exploit-db.com/exploits/3683