CVE-2008-6377

EUVD-2008-6347 · Published Mar 2, 2009

PHP remote file inclusion vulnerability in include/global.php in Multi SEO phpBB 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the pfad parameter.

Technologies

Phpbb-Seo Multi Seo Phpbb

Weaknesses

CWE-94

CVSS scores

v2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access Stealth

T1190Exploit Public-Facing Application T1027.006HTML Smuggling T1027.009Embedded Payloads T1564.009Resource Forking

References

http://www.securityfocus.com/bid/32619
https://www.exploit-db.com/exploits/7335
http://secunia.com/advisories/32986
https://exchange.xforce.ibmcloud.com/vulnerabilities/47069

Potentially impacted assets

See if this affects your attack surface