NVD

Id
57261  
Name
CVE-2007-5178  
Description
contrib/mx_glance_sdesc.php in the mx_glance 2.3.3 module for mxBB places a critical security check within a comment because of a missing comment delimiter, which allows remote attackers to conduct remote file inclusion attacks and execute arbitrary PHP code via a URL in the mx_root_path parameter. NOTE: some sources incorrectly state that phpbb_root_path is the affected parameter.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-10-03  
Modified Date
2011-03-07  
Seq
2007-5178  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
292378 57261 CVE-2007-5178 20071001 Bogus: mxBB Module mx_glance 2.3.3 Remote File Include Vulnerability  View
292379 57261 CVE-2007-5178 20071001 Bogus: mxBB Module mx_glance 2.3.3 Remote File Include Vulnerability  View
292380 57261 CVE-2007-5178 4470  View
292381 57261 CVE-2007-5178 25866  View
292382 57261 CVE-2007-5178 ADV-2007-3326  View
292383 57261 CVE-2007-5178 mxbb-mxglancesdesc-file-include(36867)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55769 JVNDB-2007-004461 mxBB 用の mx_glance モジュールにおけるリモートファイルインクルージョン攻撃を実行される脆弱性 mxBB 用の mx_glance モジュールの contrib/mx_glance_sdesc.php は、コメント区切り文字の欠如により、コメント内に重要なセキュリティチェックを配置するため、リモートファイルインクルージョン攻撃を実行される脆弱性が存在します。 CVE-2007-5178 28533 CVE-2007-5178 57261 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004461.html 2007-10-03 2012-09-25 View