CVE-2007-5822: Scribe

High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days.

Direct static code injection vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to inject arbitrary PHP code into a certain file in regged/ via the username parameter in a Register action, possibly related to the register function in forumfunctions.php.

Affected products

• Scribe Scribe: version 0.2 only

Published 2007-11-05. Last modified 2026-06-16.