CVE-2007-4120: Critical severity Jelsoft vBulletin vulnerability
DISPUTED Multiple PHP remote file inclusion vulnerabilities in Jelsoft vBulletin 3.6.5 allow remote attackers to execute arbitrary PHP code via a URL in the (1) classfile parameter to includes/functions.php, the (2) nextitem parameter to includes/functionscron.php, and the (3) specialtemplates parameter to includes/functionsforumdisplay.php. NOTE: this issue is disputed by a reliable third party who states "further investigation has revealed that the application is not vulnerable to this issue." The original researcher also has a history of erroneous claims.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4120?
CVE-2007-4120 is classified as a high-severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2007-4120?
To fix CVE-2007-4120, it is recommended to upgrade to a patched version of vBulletin that addresses these vulnerabilities.
What software is affected by CVE-2007-4120?
CVE-2007-4120 specifically affects vBulletin version 3.6.5.
What is the nature of the vulnerability in CVE-2007-4120?
CVE-2007-4120 involves multiple remote file inclusion vulnerabilities that allow remote attackers to execute arbitrary PHP code.
Are there any known exploits for CVE-2007-4120?
Yes, there are known exploits that target the vulnerabilities in CVE-2007-4120, which can lead to unauthorized server access.