CVE-2007-0683

Omegaboard <1.0beta4 - RCE

Title source: llm
STIX 2.1

Description

PHP remote file inclusion vulnerability in includes/functions.php in Omegaboard 1.0beta4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Mehmet Ince · textwebappsphp
https://www.exploit-db.com/exploits/3242

References (8)

Core 8
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/22355
Third Party Advisory mailing-list x_refsource_fulldisc
http://marc.info/?l=bugtraq&m=117036933022782&w=2
Not Applicable vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/0445
Broken Link x_refsource_misc
http://www.xoron.info/bugs/omegaboard-perl.txt
Broken Link x_refsource_misc
http://www.xoron.info/bugs/omegaboard-html.txt
Third Party Advisory, VDB Entry exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/3242
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/458825/100/0/threaded

Scores

EPSS 0.1679
EPSS Percentile 95.0%

Details

CWE
CWE-20
Status published
Products (1)
omegaboard_project/omegaboard 1.0 beta1 (4 CPE variants)
Published Feb 03, 2007
Tracked Since Feb 18, 2026