Unscored severity · published Apr 24, 2007
CVE-2007-2208
Multiple PHP remote file inclusion vulnerabilities in Extreme PHPBB2 3.0 Pre Final allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter…
–
CVSS
1.5%
EPSS
No
On KEV
Description
Multiple PHP remote file inclusion vulnerabilities in Extreme PHPBB2 3.0 Pre Final allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter to (1) functions.php or (2) functions_portal.php in includes/.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EP
Extreme Phpbb · Extreme Phpbb
3.0_pre_final · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2208
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2208
osvdb.org
http://osvdb.org/35420
osvdb.org
http://osvdb.org/35421
securityreason.com
http://securityreason.com/securityalert/2608
www.securityfocus.com
http://www.securityfocus.com/archive/1/466180/100/0/threaded
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/33743
More from Extreme Phpbb
–
CVE-2007-1105
PHP remote file inclusion vulnerability in functions.php in Extreme phpBB (aka phpBB Extreme) 3.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the…