CVEs-PoC/2007/CVE-2007-1059.md

CVE-2007-1059

Description

PHP remote file inclusion vulnerability in function.php in Ultimate Fun Book 1.02 allows remote attackers to execute arbitrary PHP code via a URL in the gbpfad parameter. NOTE: some sources mention "Ultimate Fun Board," but this appears to be an error.

POC

Reference

• https://www.exploit-db.com/exploits/3336

Github

• https://github.com/ARPSyndicate/cve-scores