← Database

CVE-2007-1631

CRITICAL CVSS: 10.0 Published: 2007-03-23 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in signup.php in CLBOX 1.01 allows remote attackers to execute arbitrary PHP code via a URL in the header parameter. NOTE: this issue has been disputed by a reliable third party, stating that header is defined through an include file before use

Affected Platforms

Clbox Clbox

Weakness Type

NVD-CWE-Other

References