36622vdb entry
http://osvdb.org/36622 CVE-2007-4330
Shoutbox 1.0 - 'Shoutbox.php' Remote File Inclusion
Record summary
CVE-2007-4330 has a selected CVSS score of 6.8; EIP currently links 1 catalogued exploit.
Description
PHP remote file inclusion vulnerability in shoutbox.php in Shoutbox 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBShoutbox 1.0 - 'Shoutbox.php' Remote File InclusionExploitDB exploitby RizgarNot analyzed1 file
References
826396Third-party advisory
http://secunia.com/advisories/26396 2997Third-party advisory
http://securityreason.com/securityalert/2997 20070809 Shoutbox 1.0 Remote Command Execution Vulnerabilitymailing list
http://www.securityfocus.com/archive/1/475960/100/0/threaded 25254vdb entry
http://www.securityfocus.com/bid/25254 ADV-2007-2835vdb entry
http://www.vupen.com/english/advisories/2007/2835 shoutbox-shoutbox-file-include(35921)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/35921 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2007-4330