Remote File Inclusion Vulnerability in BinGoPHP News by BinGoPHP
CVE-2007-0145

Currently unrated

Key Information:

Vendor

Bingo News

Status
Bingo News
Vendor
CVE Published:
9 January 2007

What is CVE-2007-0145?

A remote file inclusion vulnerability exists in the bn_smrep1.php script of BinGoPHP News version 3.01. This flaw enables remote attackers to execute arbitrary PHP code by manipulating the bnrep parameter within a URL. This vulnerability serves as a different exploitation vector compared to similar vulnerabilities identified previously, highlighting the need for users to be vigilant in updating and securing their applications against such threats.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/31328
vdb-entryx_refsource_XF
http://osvdb.org/35898
vdb-entryx_refsource_OSVDB
http://securitytracker.com/id?1017477
vdb-entryx_refsource_SECTRACK

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.