CVE-2007-3085 json
Multiple PHP remote file inclusion vulnerabilities in PBSite allow remote attackers to execute arbitrary PHP code via a URL in the (1) dbpa…
published 2007-06-06 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-3077
- cvss
- 7.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 2.4%
- EPSS 2.4% chance of exploitation in 30 days, percentile 84%
- public exploits
- 0
- none known
Summary
Multiple PHP remote file inclusion vulnerabilities in PBSite allow remote attackers to execute arbitrary PHP code via a URL in the (1) dbpath parameter to (a) useronline.php, (b) ucp.php, (c) setcookie.php, (d) sendpm.php, (e) search.php, (f) register.php, (g) profile.php, (h) post.php, (i) pmpshow.php, (j) pm.php, (k) ntopic.php, (l) nreply.php, (m) news.php, (n) memberslist.php, (o) logout.php, (p) login.php, (q) index.php, (r) help.php, (s) forum.php, (t) error.php, (u) editpost.php, (v) delpost.php, (w) delpm.php, (x) confirm.php, (y) board.php, (z) admin2.php, (aa) admin.php, or (bb) templates/pb/css/formstyles.php; or the (2) temppath parameter to (a) useronline.php, (c) setcookie.php, (e) search.php, (f) register.php, (h) post.php, (l) nreply.php, (m) news.php, (o) logout.php, (p) login.php, (q) index.php, (r) help.php, (s) forum.php, (t) error.php, (w) delpm.php, (x) confirm.php, or (y) board.php.
Exploit prediction
2.43% chance of exploitation in the next 30 days, higher than 84% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
-
osvdb.org
/38763
vdb-entry
-
osvdb.org
/38780
vdb-entry
-
osvdb.org
/38767
vdb-entry
-
osvdb.org
/38759
vdb-entry
-
securityfocus.com
/archive/1/470239/100/0/threaded
mailing-list
-
securityfocus.com
/archive/1/470347/100/0/threaded
mailing-list
-
osvdb.org
/38781
vdb-entry
-
osvdb.org
/38776
vdb-entry
-
osvdb.org
/38762
vdb-entry
-
osvdb.org
/38771
vdb-entry
-
osvdb.org
/38777
vdb-entry
-
osvdb.org
/38784
vdb-entry
-
osvdb.org
/38775
vdb-entry
-
securityreason.com
/securityalert/2777
third-party-advisory
-
osvdb.org
/38779
vdb-entry
-
osvdb.org
/38778
vdb-entry
-
osvdb.org
/38770
vdb-entry
-
osvdb.org
/38760
vdb-entry
-
osvdb.org
/38785
vdb-entry
-
osvdb.org
/38774
vdb-entry
-
osvdb.org
/38773
vdb-entry
-
osvdb.org
/38761
vdb-entry
-
osvdb.org
/38768
vdb-entry
-
osvdb.org
/38769
vdb-entry
-
osvdb.org
/38782
vdb-entry
-
osvdb.org
/38783
vdb-entry
-
osvdb.org
/38764
vdb-entry
-
osvdb.org
/38786
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/34675
vdb-entry
-
osvdb.org
/38772
vdb-entry
-
osvdb.org
/38765
vdb-entry
-
osvdb.org
/38766
vdb-entry
Sources
- CVE List CVE-2007-3085
- NVD CVE-2007-3085
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.