Unscored CVE-2007-1631 EUVD-2007-1625GHSA-p63c-pfp8-fhrj

PHP remote file inclusion vulnerability in signup.php in CLBOX 1.01 allows remote attackers to execute arbitrary PHP code via a URL in the …

Published Mar 23, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in signup.php in CLBOX 1.01 allows remote attackers to execute arbitrary PHP code via a URL in the header parameter. NOTE: this issue has been disputed by a reliable third party, stating that header is defined through an include file before use

References

20070317 CLBOX <= (signup.php header) Remote File Include Vulnerability mailing-list
33503 vdb-entry
20070319 Bogus - [CLBOX <= (signup.php header) Remote File Include Vulnerability] mailing-list
2469 third-party-advisory