CVE-2007-3935: Critical severity phpBB SupaNav vulnerability
Published Jul 21, 2007
·Updated
PHP remote file inclusion vulnerability in linkmain.php in the SupaNav 1.0.0 module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter.
Affected Software
1 affected component
phpBB SupaNav=1.0.0
Event History
Jul 21, 2007
CVE Published
12:30 AM
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-3935?
CVE-2007-3935 is rated as a high severity vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2007-3935?
To fix CVE-2007-3935, update the SupaNav module of phpBB to a patched version or implement input validation to sanitize the phpbb_root_path parameter.
3
Which software versions are affected by CVE-2007-3935?
CVE-2007-3935 affects SupaNav version 1.0.0 of phpBB.
4
Can CVE-2007-3935 be exploited remotely?
Yes, CVE-2007-3935 can be exploited remotely by attackers who can provide a malicious URL in the phpbb_root_path parameter.
5
What type of vulnerability is CVE-2007-3935?
CVE-2007-3935 is classified as a remote file inclusion vulnerability.