CVE-2007-2234

CVE-2007-2234 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

include/common.php in PunBB 1.2.14 and earlier does not properly handle a disabled ini_get function when checking the register_globals setting, which allows remote attackers to register global parameters, as demonstrated by an SQL injection attack on the search_id parameter to search.php.

Learn more about our Cis Benchmark Audit For Microsoft Sql Server.