CVE-2007-0050

HIGH 7.5CVE-2007-0050 · Published 04/01/2007 · updated 16/06/2026

In short

CVE-2007-0050 is a HIGH (CVSS 7.5) vulnerability affecting openpinboard (openpinboard).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 75.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
openpinboard openpinboard	`= 2.0`	No fix yet

Description

PHP remote file inclusion vulnerability in index.php in OpenPinboard 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the language parameter. NOTE: this issue has been disputed by the developer and a third party, since the variable is set before use. CVE analysis suggests that there is a small time window of risk before the installation is complete

References

archives.neohapsis.com/archives/bugtraq/2007-01/0176.html
osvdb.org/33375
securityfocus.com/archive/1/455795/100/0/threaded
securityfocus.com/archive/1/455818/100/0/threaded · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free