CVE-2007-0050

PHP remote file inclusion vulnerability in index.php in OpenPinboard 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the language parameter. NOTE: this issue has been disputed by the developer and a third party, since the variable is set before use. CVE analysis suggests that there is a small time window of risk before the installation is complete

• http://archives.neohapsis.com/archives/bugtraq/2007-01/0176.html
• http://osvdb.org/33375
• http://www.securityfocus.com/archive/1/455795/100/0/threaded
• http://www.securityfocus.com/archive/1/455818/100/0/threadedExploit, Vendor Advisory
• http://archives.neohapsis.com/archives/bugtraq/2007-01/0176.html
• http://osvdb.org/33375
• http://www.securityfocus.com/archive/1/455795/100/0/threaded
• http://www.securityfocus.com/archive/1/455818/100/0/threadedExploit, Vendor Advisory

Published

Jan 4, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-0044Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, In…
• CVE-2007-0045Multiple cross-site scripting (XSS) vulnerabilities in Adobe…
• CVE-2007-0046Double free vulnerability in the Adobe Acrobat Reader Plugin…
• CVE-2007-0047CRLF injection vulnerability in Adobe Acrobat Reader Plugin …
• CVE-2007-0048Adobe Acrobat Reader Plugin before 8.0.0, and possibly the p…
• CVE-2007-0049Geckovich TaskTracker Pro 1.5 and earlier allows remote atta…
• CVE-2007-0051Format string vulnerability in Apple iPhoto 6.0.5 (316), and…
• CVE-2007-0052SQL injection vulnerability in haberdetay.asp in Vizayn Habe…
• CVE-2007-0053SQL injection vulnerability in detail.asp in ASP SiteWare au…
• CVE-2007-0054Cross-site scripting (XSS) vulnerability in gbrowse.php in B…
• CVE-2007-0055Directory traversal vulnerability in formbankcgi.exe/Abfrage…
• CVE-2007-0056Multiple cross-site scripting (XSS) vulnerabilities in AShop…