Skip to content

CVE-2008-0442 PHP remote file inclusion vulnerability in inc/linkbar.php in Small Axe Weblog 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the ffile parameter, a different vector than CVE...

HighCVSS 7.5 EPSS 2.0%
Published
Updated
Exploit status
No public exploit known

Description

PHP remote file inclusion vulnerability in inc/linkbar.php in Small Axe Weblog 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the ffile parameter, a different vector than CVE-2008-0376. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

ProductAffected versionsFixed in
small axe solutions weblog = 0.3.1 No fix listed

References

  • 28568 third-party-advisory vendor-advisory
  • 27383 exploit vdb-entry