CVE Feed

    Dashboard / CVE / CVE-2007-6396

    CVE-2007-6396

    Direct static code injection vulnerability in index.php in Flat PHP Board 1.2 and earlier allows remote attackers to inject arbitrary PHP code via the (1) username, (2) password, and (3) email parameters when registering a user account, which can be executed by accessing the user's php file for this account. NOTE: similar code injection might be possible in a user profile.

    Published:Dec 17, 2007
    Last Modified:Apr 23, 2026
    EPS:Dec 17, 2007
    EPSS Score:0.04515
    CVSS Score:7.5

    Affected Products

    Vendor
    Myupb
    Product
    Flat Php Board

    Exploits

    https://www.exploit-db.com/exploits/4705

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High