Description

PHP remote file inclusion vulnerability in includes/openid/Auth/OpenID/BBStore.php in phpBB Openid 0.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the openid_root_path parameter.

Remediation

References

CVE-2007-5173

Related Vulnerabilities

WordPress Plugin Elementor Website Builder Cross-Site Scripting (2.8.4)

WordPress Plugin Ultimate Appointment Booking & Scheduling Cross-Site Scripting (1.1.9)

WordPress Plugin Feed Them Social-for Twitter feed, Youtube and more Unspecified Vulnerability (1.9.3)

WordPress Plugin QR Redirector Security Bypass (1.5)

Atlassian Jira Incorrect Behavior Order: Validate Before Canonicalize Vulnerability (CVE-2022-26136)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-94 CVE-2007-5173