Description

PHP remote file inclusion vulnerability in includes/openid/Auth/OpenID/BBStore.php in phpBB Openid 0.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the openid_root_path parameter.

Remediation

References

CVE-2007-5173

Related Vulnerabilities

WordPress Plugin NextGEN Gallery-WordPress Gallery Multiple Vulnerabilities (2.0.77)

WebLogic Observable Discrepancy Vulnerability (CVE-2019-3740)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-42043)

WordPress Plugin Ldap WP Login/Active Directory Integration Multiple Vulnerabilities (3.0.1)

WordPress Plugin WP-TopBar SQL Injection (5.36)

Severity

Medium

Classification

CVE-2007-5173 CWE-94

Tags

Missing Update Known Vulnerabilities