{"id":"CVE-2007-3085","state":"PUBLISHED","title":"Multiple PHP remote file inclusion vulnerabilities in PBSite allow remote attackers to execute arbitrary PHP code via a URL in the (1) dbpath parameter to (a) useronline.php, (b) u","description":"Multiple PHP remote file inclusion vulnerabilities in PBSite allow remote attackers to execute arbitrary PHP code via a URL in the (1) dbpath parameter to (a) useronline.php, (b) ucp.php, (c) setcookie.php, (d) sendpm.php, (e) search.php, (f) register.php, (g) profile.php, (h) post.php, (i) pmpshow.php, (j) pm.php, (k) ntopic.php, (l) nreply.php, (m) news.php, (n) memberslist.php, (o) logout.php, (p) login.php, (q) index.php, (r) help.php, (s) forum.php, (t) error.php, (u) editpost.php, (v) delpost.php, (w) delpm.php, (x) confirm.php, (y) board.php, (z) admin2.php, (aa) admin.php, or (bb) templates/pb/css/formstyles.php; or the (2) temppath parameter to (a) useronline.php, (c) setcookie.php, (e) search.php, (f) register.php, (h) post.php, (l) nreply.php, (m) news.php, (o) logout.php, (p) login.php, (q) index.php, (r) help.php, (s) forum.php, (t) error.php, (w) delpm.php, (x) confirm.php, or (y) board.php.","publishedAt":"2007-06-06T10:00:00.000Z","updatedAt":"2024-08-07T14:05:28.632Z","severity":null,"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["http://osvdb.org/38763","http://osvdb.org/38780","http://osvdb.org/38767","http://osvdb.org/38759","http://www.securityfocus.com/archive/1/470239/100/0/threaded","http://www.securityfocus.com/archive/1/470347/100/0/threaded","http://osvdb.org/38781","http://osvdb.org/38776","http://osvdb.org/38762","http://osvdb.org/38771","http://osvdb.org/38777","http://osvdb.org/38784","http://osvdb.org/38775","http://securityreason.com/securityalert/2777","http://osvdb.org/38779","http://osvdb.org/38778","http://osvdb.org/38770","http://osvdb.org/38760","http://osvdb.org/38785","http://osvdb.org/38774","http://osvdb.org/38773","http://osvdb.org/38761","http://osvdb.org/38768","http://osvdb.org/38769","http://osvdb.org/38782","http://osvdb.org/38783","http://osvdb.org/38764","http://osvdb.org/38786","https://exchange.xforce.ibmcloud.com/vulnerabilities/34675","http://osvdb.org/38772","http://osvdb.org/38765","http://osvdb.org/38766"],"weaknesses":[],"ingestedAt":"2026-10-29T19:38:33.664Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2007/3xxx/CVE-2007-3085.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2007-3085","state":"PUBLISHED","datePublished":"2007-06-06T10:00:00.000Z","dateUpdated":"2024-08-07T14:05:28.632Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2007-06-05T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in PBSite allow remote attackers to execute arbitrary PHP code via a URL in the (1) dbpath parameter to (a) useronline.php, (b) ucp.php, (c) setcookie.php, (d) sendpm.php, (e) search.php, (f) register.php, (g) profile.php, (h) post.php, (i) pmpshow.php, (j) pm.php, (k) ntopic.php, (l) nreply.php, (m) news.php, (n) memberslist.php, (o) logout.php, (p) login.php, (q) index.php, (r) help.php, (s) forum.php, (t) error.php, (u) editpost.php, (v) delpost.php, (w) delpm.php, (x) confirm.php, (y) board.php, (z) admin2.php, (aa) admin.php, or (bb) templates/pb/css/formstyles.php; or the (2) temppath parameter to (a) useronline.php, (c) setcookie.php, (e) search.php, (f) register.php, (h) post.php, (l) nreply.php, (m) news.php, (o) logout.php, (p) login.php, (q) index.php, (r) help.php, (s) forum.php, (t) error.php, (w) delpm.php, (x) confirm.php, or (y) board.php."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"http://osvdb.org/38763","name":"38763","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://osvdb.org/38780","name":"38780","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://osvdb.org/38767","name":"38767","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://osvdb.org/38759","name":"38759","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://www.securityfocus.com/archive/1/470239/100/0/threaded","name":"20070601 PBSite - PHP Bulletin Site | CMS ====> RFI","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://www.securityfocus.com/archive/1/470347/100/0/threaded","name":"20070602 PBSite - PHP Bulletin Site | CMS ====> RFI","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://osvdb.org/38781","name":"38781","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://osvdb.org/38776","name":"38776","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://osvdb.org/38762","name":"38762","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://osvdb.org/38771","name":"38771","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://osvdb.org/38777","name":"38777","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://osvdb.org/38784","name":"38784","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://osvdb.org/38775","name":"38775","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://securityreason.com/securityalert/2777","name":"2777","tags":["third-party-advisory","x_refsource_SREASON"]},{"url":"http://osvdb.org/38779","name":"38779","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://osvdb.org/38778","name":"38778","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://osvdb.org/38770","name":"38770","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://osvdb.org/38760","name":"38760","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://osvdb.org/38785","name":"38785","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://osvdb.org/38774","name":"38774","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://osvdb.org/38773","name":"38773","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://osvdb.org/38761","name":"38761","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://osvdb.org/38768","name":"38768","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://osvdb.org/38769","name":"38769","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://osvdb.org/38782","name":"38782","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://osvdb.org/38783","name":"38783","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://osvdb.org/38764","name":"38764","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://osvdb.org/38786","name":"38786","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34675","name":"pbsite-dbpathtemppath-file-include(34675)","tags":["vdb-entry","x_refsource_XF"]},{"url":"http://osvdb.org/38772","name":"38772","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://osvdb.org/38765","name":"38765","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://osvdb.org/38766","name":"38766","tags":["vdb-entry","x_refsource_OSVDB"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"mitre","dateUpdated":"2018-10-16T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca"},"datePublic":"2007-06-01T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-3085","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple PHP remote file inclusion vulnerabilities in PBSite allow remote attackers to execute arbitrary PHP code via a URL in the (1) dbpath parameter to (a) useronline.php, (b) ucp.php, (c) setcookie.php, (d) sendpm.php, (e) search.php, (f) register.php, (g) profile.php, (h) post.php, (i) pmpshow.php, (j) pm.php, (k) ntopic.php, (l) nreply.php, (m) news.php, (n) memberslist.php, (o) logout.php, (p) login.php, (q) index.php, (r) help.php, (s) forum.php, (t) error.php, (u) editpost.php, (v) delpost.php, (w) delpm.php, (x) confirm.php, (y) board.php, (z) admin2.php, (aa) admin.php, or (bb) templates/pb/css/formstyles.php; or the (2) temppath parameter to (a) useronline.php, (c) setcookie.php, (e) search.php, (f) register.php, (h) post.php, (l) nreply.php, (m) news.php, (o) logout.php, (p) login.php, (q) index.php, (r) help.php, (s) forum.php, (t) error.php, (w) delpm.php, (x) confirm.php, or (y) board.php."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"38763","refsource":"OSVDB","url":"http://osvdb.org/38763"},{"name":"38780","refsource":"OSVDB","url":"http://osvdb.org/38780"},{"name":"38767","refsource":"OSVDB","url":"http://osvdb.org/38767"},{"name":"38759","refsource":"OSVDB","url":"http://osvdb.org/38759"},{"name":"20070601 PBSite - PHP Bulletin Site | CMS ====> RFI","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/470239/100/0/threaded"},{"name":"20070602 PBSite - PHP Bulletin Site | CMS ====> RFI","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/470347/100/0/threaded"},{"name":"38781","refsource":"OSVDB","url":"http://osvdb.org/38781"},{"name":"38776","refsource":"OSVDB","url":"http://osvdb.org/38776"},{"name":"38762","refsource":"OSVDB","url":"http://osvdb.org/38762"},{"name":"38771","refsource":"OSVDB","url":"http://osvdb.org/38771"},{"name":"38777","refsource":"OSVDB","url":"http://osvdb.org/38777"},{"name":"38784","refsource":"OSVDB","url":"http://osvdb.org/38784"},{"name":"38775","refsource":"OSVDB","url":"http://osvdb.org/38775"},{"name":"2777","refsource":"SREASON","url":"http://securityreason.com/securityalert/2777"},{"name":"38779","refsource":"OSVDB","url":"http://osvdb.org/38779"},{"name":"38778","refsource":"OSVDB","url":"http://osvdb.org/38778"},{"name":"38770","refsource":"OSVDB","url":"http://osvdb.org/38770"},{"name":"38760","refsource":"OSVDB","url":"http://osvdb.org/38760"},{"name":"38785","refsource":"OSVDB","url":"http://osvdb.org/38785"},{"name":"38774","refsource":"OSVDB","url":"http://osvdb.org/38774"},{"name":"38773","refsource":"OSVDB","url":"http://osvdb.org/38773"},{"name":"38761","refsource":"OSVDB","url":"http://osvdb.org/38761"},{"name":"38768","refsource":"OSVDB","url":"http://osvdb.org/38768"},{"name":"38769","refsource":"OSVDB","url":"http://osvdb.org/38769"},{"name":"38782","refsource":"OSVDB","url":"http://osvdb.org/38782"},{"name":"38783","refsource":"OSVDB","url":"http://osvdb.org/38783"},{"name":"38764","refsource":"OSVDB","url":"http://osvdb.org/38764"},{"name":"38786","refsource":"OSVDB","url":"http://osvdb.org/38786"},{"name":"pbsite-dbpathtemppath-file-include(34675)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34675"},{"name":"38772","refsource":"OSVDB","url":"http://osvdb.org/38772"},{"name":"38765","refsource":"OSVDB","url":"http://osvdb.org/38765"},{"name":"38766","refsource":"OSVDB","url":"http://osvdb.org/38766"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://osvdb.org/38763","name":"38763","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://osvdb.org/38780","name":"38780","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://osvdb.org/38767","name":"38767","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://osvdb.org/38759","name":"38759","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/470239/100/0/threaded","name":"20070601 PBSite - PHP Bulletin Site | CMS ====> RFI","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/470347/100/0/threaded","name":"20070602 PBSite - PHP Bulletin Site | CMS ====> RFI","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://osvdb.org/38781","name":"38781","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://osvdb.org/38776","name":"38776","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://osvdb.org/38762","name":"38762","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://osvdb.org/38771","name":"38771","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://osvdb.org/38777","name":"38777","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://osvdb.org/38784","name":"38784","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://osvdb.org/38775","name":"38775","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://securityreason.com/securityalert/2777","name":"2777","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"]},{"url":"http://osvdb.org/38779","name":"38779","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://osvdb.org/38778","name":"38778","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://osvdb.org/38770","name":"38770","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://osvdb.org/38760","name":"38760","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://osvdb.org/38785","name":"38785","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://osvdb.org/38774","name":"38774","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://osvdb.org/38773","name":"38773","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://osvdb.org/38761","name":"38761","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://osvdb.org/38768","name":"38768","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://osvdb.org/38769","name":"38769","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://osvdb.org/38782","name":"38782","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://osvdb.org/38783","name":"38783","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://osvdb.org/38764","name":"38764","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://osvdb.org/38786","name":"38786","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34675","name":"pbsite-dbpathtemppath-file-include(34675)","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://osvdb.org/38772","name":"38772","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://osvdb.org/38765","name":"38765","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://osvdb.org/38766","name":"38766","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-07T14:05:28.632Z"}}]}}}