← Database

CVE-2007-1059

MEDIUM CVSS: 6.8 Published: 2007-02-22 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in function.php in Ultimate Fun Book 1.02 allows remote attackers to execute arbitrary PHP code via a URL in the gbpfad parameter. NOTE: some sources mention "Ultimate Fun Board," but this appears to be an error.

Affected Platforms

Ultimate Fun Book Ultimate Fun Book

Weakness Type

NVD-CWE-Other

References