CVE-2007-3934

BBS E-Market - Remote File Inclusion via p_mode Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-3934. PoCs published by mozi.

AI-analyzed exploit summary This is a minimal stub for CVE-2007-3934, providing only a dork and an exploit path without functional code. It references a forum post for additional details.

Description

PHP remote file inclusion vulnerability in postscript/postscript.php in BBS E-Market allows remote attackers to execute arbitrary PHP code via a URL in the p_mode parameter.

Exploits (1)

exploitdb STUB VERIFIED
by mozi · textwebappsphp
https://www.exploit-db.com/exploits/4195

This is a minimal stub for CVE-2007-3934, providing only a dork and an exploit path without functional code. It references a forum post for additional details.

Classification
Stub 80%
Attack Type
Other
Complexity
Trivial
Reliability
Theoretical
Target: BeMarket (version unspecified)
No auth needed
Prerequisites: Target must be running BeMarket with vulnerable postscript.php endpoint
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (7)

Core 7
Core References
Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/24957
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/2608
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/4195
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/36279
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/35476
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/26117

Scores

EPSS 0.0842
EPSS Percentile 94.3%

Details

Status published
Products (1)
bbs/e-market
Published Jul 21, 2007
Tracked Since Feb 18, 2026