CVSS: 6.8EPSS: 1%CPEs: 1EXPL: 2CVE-2007-6624 – PNPHPBB2 < 1.2i - 'PHPEx' Local File Inclusion
https://notcve.org/view.php?id=CVE-2007-6624
Directory traversal vulnerability in printview.php in PNphpBB2 1.2i and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the phpEx parameter. Vulnerabilidad de salto de directorio en printview.php de PNphpBB2 1.2i y anteriores permite a atacantes remotos incluir y ejecutar archivos locales de su elección mediante un .. (punto punto) en el parámetro phpEx. • https://www.exploit-db.com/exploits/4796 http://irk4z.wordpress.com/2007/12/27/pnphpbb2-12i-printviewphp-phpex-local-file-inclusion-vuln http://osvdb.org/39879 http://www.securityfocus.com/bid/27039 https://exchange.xforce.ibmcloud.com/vulnerabilities/39243 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2007-3052 – PNPHPBB2 < 1.2 - 'index.php' SQL Injection
https://notcve.org/view.php?id=CVE-2007-3052
SQL injection vulnerability in index.php in the PNphpBB2 1.2i and earlier module for PostNuke allows remote attackers to execute arbitrary SQL commands via the c parameter. Vulnerabilidad de inyección SQL en index.php en el módulo PNphpBB2 1.2i y anteriores para PostNuke permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro c. • https://www.exploit-db.com/exploits/4026 http://osvdb.org/35424 http://secunia.com/advisories/25480 http://www.securityfocus.com/bid/24295 http://www.vupen.com/english/advisories/2007/2037 https://exchange.xforce.ibmcloud.com/vulnerabilities/34668 •