← Database

CVE-2007-2899

HIGH CVSS: 7.5 Published: 2007-05-30 Modified: 2026-06-16

Description

Direct static code injection vulnerability in admin_config.php in NavBoard 2.6.0 allows remote attackers to inject arbitrary PHP code into data/config.php via multiple parameters, as demonstrated via the threadperpage parameter in an editconfig action.

Affected Platforms

Navboard Navboard

Weakness Type

CWE-94

References