CVE-2007-5178

Name of the Vulnerable Software and Affected Versions mxBB module mx glance version 2.3.3

Description The issue allows remote attackers to conduct remote file inclusion attacks and execute arbitrary PHP code via a URL in the mx root path parameter. This is due to a critical security check being placed within a comment because of a missing comment delimiter in the contrib/mx glance sdesc.php file.

Recommendations For mxBB module mx glance version 2.3.3, consider restricting access to the mx root path parameter to minimize the risk of exploitation. Additionally, ensure proper comment delimiters are used in the contrib/mx glance sdesc.php file to prevent security checks from being ignored. At the moment, there is no information about a newer version that contains a fix for this vulnerability.