Unscored CVE-2007-0596 EUVD-2007-0594GHSA-pgw8-237q-3m4r

PHP remote file inclusion vulnerability in index/main.php in Aztek Forum 4.00 allows remote authenticated administrators to execute arbitra…

Published Jan 30, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in index/main.php in Aztek Forum 4.00 allows remote authenticated administrators to execute arbitrary PHP code via a URL in the PF[top_url] parameter.

References

http://acid-root.new.fr/poc/21070125.txt
20070125 Aztek Forum 4.1 Multiple Vulnerabilities Exploit mailing-list
33593 vdb-entry
20070125 Re: Aztek Forum 4.1 Multiple Vulnerabilities Exploit mailing-list