Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 22/04/2003 Updated: 05/09/2008

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

savesettings.php in phpGB 1.20 and previous versions does not require authentication, which allows remote malicious users to cause a denial of service or execute arbitrary PHP code by using savesettings.php to modify config.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
phpgb phpgb 1.10
phpgb phpgb 1.20

source: wwwsecurityfocuscom/bid/5679/info phpGB is subject to a PHP code injection vulnerability After bypassing authentication it is possible to inject code into the guestbook configuration file (configphp) by supplying malicious parameters for the savesettingsphp script The configuration file is referenced in most of the other gues ...

NVD-CWE-Other http://archives.neohapsis.com/archives/bugtraq/2002-09/0076.html http://www.securityfocus.com/bid/5679 http://www.iss.net/security_center/static/10065.php https://nvd.nist.gov https://www.exploit-db.com/exploits/21783/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2002-1481

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect