PT-2008-3256

CVE-2008-1712

·

Published

2008-04-09

·

Updated

2017-09-29

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions mxBB mx blogs version 2.0.0 beta
Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the mx root path parameter in the includes/functions weblog.php file.
Recommendations For mxBB mx blogs version 2.0.0 beta, consider restricting access to the mx root path parameter to minimize the risk of exploitation. As a temporary workaround, avoid using the mx root path parameter in the affected includes/functions weblog.php file until a patch is available.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-94: Improper Control of Generation of Code (\'Code Injection\')
Related identifiers
CVE-2008-1712
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com