CVE-2007-2941

Multiple PHP remote file inclusion vulnerabilities in the creator in vBulletin Google Yahoo Site Map (vBGSiteMap) 2.41 for vBulletin allow remote attackers to execute arbitrary PHP code via a URL in the base parameter to (1) vbgsitemap/vbgsitemap-config.php or (2) vbgsitemap/vbgsitemap-vbseo.php.

Affected products

Vbulletin

Michael Brandon Vbgsitemap

= 2.41

Fix

Available

CVSS 2.0

7.5 HIGH

EPSS

7.0% (94th percentile)

NVD status

Modified

Published

2007-05-31