{"id":"CVE-2007-0900","aliases":["EUVD-2007-0896","GHSA-grp7-7gr9-hh79"],"status":"published","title":"Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier,...","description":"Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) configpath parameter to (a) tagviewer.php, (b) tag_process.php, and (c) CONFIG/errmsg.inc.php; and (d) addTagmin.php, (e) ban_watch.php, (f) delTagmin.php, (g) delTag.php, (h) editTagmin.php, (i) editTag.php, (j) manageTagmins.php, and (k) verify.php in tagmin/; the (2) adminpath parameter to (l) tagviewer.php, (m) tag_process.php, and (n) tagmin/index.php; and the (3) admin parameter to (o) readconf.php, (p) updateconf.php, (q) updatefilter.php, and (r) wordfilter.php in tagmin/; different vectors than CVE-2006-5249.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.10326,"percentile":0.95739,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2007-02-13T20:00:00Z","modified":"2026-06-16T22:36:30Z","exploits":[{"source":"exploitdb","id":"EDB-29578","title":"Tagit! Tagit2b 2.1.B Build 2 - 'tagviewer.php' Multiple Remote File Inclusions","type":"webapps","platform":"php","date":"2007-02-12","verified":true,"url":"https://www.exploit-db.com/exploits/29578"},{"source":"exploitdb","id":"EDB-29579","title":"Tagit! Tagit2b 2.1.B Build 2 - 'tag_process.php' Multiple Remote File Inclusions","type":"webapps","platform":"php","date":"2007-02-12","verified":true,"url":"https://www.exploit-db.com/exploits/29579"},{"source":"exploitdb","id":"EDB-29580","title":"Tagit! Tagit2b 2.1.B Build 2 - '/CONFIG/errmsg.inc.php?configpath' Remote File Inclusion","type":"webapps","platform":"php","date":"2007-02-12","verified":true,"url":"https://www.exploit-db.com/exploits/29580"},{"source":"exploitdb","id":"EDB-29581","title":"Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/addTagmin.php?configpath' Remote File Inclusion","type":"webapps","platform":"php","date":"2007-02-12","verified":true,"url":"https://www.exploit-db.com/exploits/29581"},{"source":"exploitdb","id":"EDB-29582","title":"Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/ban_watch.php?configpath' Remote File Inclusion","type":"webapps","platform":"php","date":"2007-02-12","verified":true,"url":"https://www.exploit-db.com/exploits/29582"},{"source":"exploitdb","id":"EDB-29583","title":"Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/delTagmin.php?configpath' Remote File Inclusion","type":"webapps","platform":"php","date":"2007-02-12","verified":true,"url":"https://www.exploit-db.com/exploits/29583"},{"source":"exploitdb","id":"EDB-29584","title":"Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/delTag.php?configpath' Remote File Inclusion","type":"webapps","platform":"php","date":"2007-02-12","verified":true,"url":"https://www.exploit-db.com/exploits/29584"},{"source":"exploitdb","id":"EDB-29585","title":"Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/editTagmin.php?configpath' Remote File Inclusion","type":"webapps","platform":"php","date":"2007-02-12","verified":true,"url":"https://www.exploit-db.com/exploits/29585"},{"source":"exploitdb","id":"EDB-29586","title":"Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/editTag.php?configpath' Remote File Inclusion","type":"webapps","platform":"php","date":"2007-02-12","verified":true,"url":"https://www.exploit-db.com/exploits/29586"},{"source":"exploitdb","id":"EDB-29587","title":"Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/manageTagmins.php?configpath' Remote File Inclusion","type":"webapps","platform":"php","date":"2007-02-12","verified":true,"url":"https://www.exploit-db.com/exploits/29587"},{"source":"exploitdb","id":"EDB-29588","title":"Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/verify.php?configpath' Remote File Inclusion","type":"webapps","platform":"php","date":"2007-02-12","verified":true,"url":"https://www.exploit-db.com/exploits/29588"},{"source":"exploitdb","id":"EDB-29589","title":"Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/index.php?adminpath' Remote File Inclusion","type":"webapps","platform":"php","date":"2007-02-12","verified":true,"url":"https://www.exploit-db.com/exploits/29589"},{"source":"exploitdb","id":"EDB-29590","title":"Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/readconf.php?Admin' Remote File Inclusion","type":"webapps","platform":"php","date":"2007-02-12","verified":true,"url":"https://www.exploit-db.com/exploits/29590"},{"source":"exploitdb","id":"EDB-29591","title":"Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/updateconf.php?Admin' Remote File Inclusion","type":"webapps","platform":"php","date":"2007-02-12","verified":true,"url":"https://www.exploit-db.com/exploits/29591"},{"source":"exploitdb","id":"EDB-29592","title":"Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/updatefilter.php?Admin' Remote File Inclusion","type":"webapps","platform":"php","date":"2007-02-12","verified":true,"url":"https://www.exploit-db.com/exploits/29592"},{"source":"exploitdb","id":"EDB-29593","title":"Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/wordfilter.php?Admin' Remote File Inclusion","type":"webapps","platform":"php","date":"2007-02-12","verified":true,"url":"https://www.exploit-db.com/exploits/29593"}],"products":[{"vendor":"tagit","product":"tagboard"}],"references":[{"url":"http://www.osvdb.org/34618","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.osvdb.org/34614","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://advisories.echo.or.id/adv/adv65-K-159-2007.txt","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.osvdb.org/34616","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32436","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.osvdb.org/34607","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.osvdb.org/34609","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.osvdb.org/34611","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2007/0557","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://www.osvdb.org/34613","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.osvdb.org/34610","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.securityfocus.com/bid/22518","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.osvdb.org/34608","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.osvdb.org/34605","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.osvdb.org/34606","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.osvdb.org/34615","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.osvdb.org/34603","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.osvdb.org/34612","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.osvdb.org/34617","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.osvdb.org/34604","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-0900"},{"url":"https://github.com/advisories/GHSA-grp7-7gr9-hh79"}],"sources":{"cve":[{"id":"CVE-2007-0900","description":"Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) configpath parameter to (a) tagviewer.php, (b) tag_process.php, and (c) CONFIG/errmsg.inc.php; and (d) addTagmin.php, (e) ban_watch.php, (f) delTagmin.php, (g) delTag.php, (h) editTagmin.php, (i) editTag.php, (j) manageTagmins.php, and (k) verify.php in tagmin/; the (2) adminpath parameter to (l) tagviewer.php, (m) tag_process.php, and (n) tagmin/index.php; and the (3) admin parameter to (o) readconf.php, (p) updateconf.php, (q) updatefilter.php, and (r) wordfilter.php in tagmin/; different vectors than CVE-2006-5249.","status":"published","published":"2007-02-13T20:00:00Z","modified":"2024-08-07T12:34:21.231Z","updated_at":"2026-11-02T13:34:15.046008Z"}],"euvd":[{"id":"EUVD-2007-0896","description":"Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) configpath parameter to (a) tagviewer.php, (b) tag_process.php, and (c) CONFIG/errmsg.inc.php; and (d) addTagmin.php, (e) ban_watch.php, (f) delTagmin.php, (g) delTag.php, (h) editTagmin.php, (i) editTag.php, (j) manageTagmins.php, and (k) verify.php in tagmin/; the (2) adminpath parameter to (l) tagviewer.php, (m) tag_process.php, and (n) tagmin/index.php; and the (3) admin parameter to (o) readconf.php, (p) updateconf.php, (q) updatefilter.php, and (r) wordfilter.php in tagmin/; different vectors than CVE-2006-5249.","status":"published","published":"2007-02-13T20:00:00Z","modified":"2024-08-07T12:34:21Z","updated_at":"2026-11-03T01:38:28.235221Z"}],"ghsa":[{"id":"GHSA-grp7-7gr9-hh79","title":"Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier,...","description":"Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) configpath parameter to (a) tagviewer.php, (b) tag_process.php, and (c) CONFIG/errmsg.inc.php; and (d) addTagmin.php, (e) ban_watch.php, (f) delTagmin.php, (g) delTag.php, (h) editTagmin.php, (i) editTag.php, (j) manageTagmins.php, and (k) verify.php in tagmin/; the (2) adminpath parameter to (l) tagviewer.php, (m) tag_process.php, and (n) tagmin/index.php; and the (3) admin parameter to (o) readconf.php, (p) updateconf.php, (q) updatefilter.php, and (r) wordfilter.php in tagmin/; different vectors than CVE-2006-5249.","status":"published","published":"2022-05-01T17:47:55Z","modified":"2023-01-31T05:03:10Z","updated_at":"2026-11-02T14:48:25.047764Z"}],"nvd":[{"id":"CVE-2007-0900","description":"Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) configpath parameter to (a) tagviewer.php, (b) tag_process.php, and (c) CONFIG/errmsg.inc.php; and (d) addTagmin.php, (e) ban_watch.php, (f) delTagmin.php, (g) delTag.php, (h) editTagmin.php, (i) editTag.php, (j) manageTagmins.php, and (k) verify.php in tagmin/; the (2) adminpath parameter to (l) tagviewer.php, (m) tag_process.php, and (n) tagmin/index.php; and the (3) admin parameter to (o) readconf.php, (p) updateconf.php, (q) updatefilter.php, and (r) wordfilter.php in tagmin/; different vectors than CVE-2006-5249.","status":"published","published":"2007-02-13T20:28:00Z","modified":"2026-06-16T22:36:30.727Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:13.10493Z"}]}}