Description

PHP remote file inclusion vulnerability in includes/openid/Auth/OpenID/BBStore.php in phpBB Openid 0.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the openid_root_path parameter.

Remediation

References

CVE-2007-5173

Related Vulnerabilities

WordPress 4.9.x Multiple Vulnerabilities (4.9 - 4.9.16)

Apache HTTP Server Other Vulnerability (CVE-2003-0993)

MySQL Other Vulnerability (CVE-2005-0710)

Ruby Improper Input Validation Vulnerability (CVE-2017-6181)

WordPress Plugin Google Adsense and Hotel Booking Open Proxy (1.0.5)

Severity

Medium

Classification

CVE-2007-5173 CWE-94

Tags

Missing Update Known Vulnerabilities