CVE-2008-2481

EUVD-2008-2476
PHP remote file inclusion vulnerability in authentication/phpbb3/phpbb3.functions.php in phpRaider 1.0.7 and 1.0.7a, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pConfig_auth[phpbb_path] parameter.
Code Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 91%
Affected Products (NVD)
VendorProductVersion
phpraiderphpraider
1.0.7
phpraiderphpraider
1.0.7a:a
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://forums.phpraider.com/showthread.php?t=1087#v1_0_7b_-_May_29__2008
http://secunia.com/advisories/30375
http://www.securityfocus.com/bid/29356
http://www.vupen.com/english/advisories/2008/1646/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/42622
https://www.exploit-db.com/exploits/5671
http://forums.phpraider.com/showthread.php?t=1087#v1_0_7b_-_May_29__2008
http://secunia.com/advisories/30375
http://www.securityfocus.com/bid/29356
http://www.vupen.com/english/advisories/2008/1646/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/42622
https://www.exploit-db.com/exploits/5671