Skip to content

CVE-2008-1067 Multiple PHP remote file inclusion vulnerabilities in phpQLAdmin 2.2.7 allow remote attackers to execute arbitrary PHP code via a URL in the _SESSION[path] parameter to (1) ezmlm.php and (2) tools/upd...

MediumCVSS 6.8 EPSS 21.7%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Multiple PHP remote file inclusion vulnerabilities in phpQLAdmin 2.2.7 allow remote attackers to execute arbitrary PHP code via a URL in the _SESSION[path] parameter to (1) ezmlm.php and (2) tools/update_translations.php.

Affected products

ProductAffected versionsFixed in
phpqladmin = 2.2.7 No fix listed

References

  • 29076 third-party-advisory vendor-advisory
  • 5173 exploit