Beveiligingsadvies

CVE-2007-5822

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2007-11-05 19:00:00
Laatst bijgewerkt 2024-08-07 15:47:00
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Direct static code injection vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to inject arbitrary PHP code into a certain file in regged/ via the username parameter in a Register action, possibly related to the register function in forumfunctions.php.