← Database

CVE-2005-1200

HIGH CVSS: 7.5 Published: 2005-05-02 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in main_index.php in AZ Bulletin Board (AZbb) 1.0.07a through 1.0.07c allows remote attackers to execute arbitrary PHP code by modifying the (1) dir_src or (2) abs_layer parameter to reference a URL on a remote web server that contains the code.

Affected Platforms

Azbb Az Bulletin Board

Weakness Type

NVD-CWE-Other

References