CVE-2007-1052 - CVE House
Back to Database
Status published Critical CVE-2007-1052

PHP remote file inclusion vulnerability in index.php in PBLang (PBL)...

Vulnerability Description

PHP remote file inclusion vulnerability in index.php in PBLang (PBL) 4.60 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the dbpath parameter, a different vector than CVE-2006-5062. NOTE: this issue has been disputed by a reliable third party for 4.65, stating that the dbpath variable is initialized in an included file that is created upon installation

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-1052

Credits & Attribution

No credits recorded in the NVD database.

References

More from pblang

View All →
CVE-2007-3096
Directory traversal vulnerability in login.php in PBLang (PBL) 4.67.16.a and...
Medium 6.8
CVE-2006-5062
PHP remote file inclusion vulnerability in templates/pb/language/lang_nl.php in PBLang (PBL)...
High 7.5
CVE-2005-2895
setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote...
Medium 5
CVE-2005-2894
Cross-site scripting (XSS) vulnerability in the user registration in PBLang...
Medium 4.3
CVE-2005-2893
Direct static code injection vulnerability in setcookie.php in PBLang 4.65,...
High 7.5

Affected Vendor

Affected Software

pblang
Vulnerable Versions:
0

Timeline

Official Publish: February 21st, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.