CVE-2008-1069 Multiple PHP remote file inclusion vulnerabilities in Quantum Game Library 0.7.2c allow remote attackers to execute arbitrary PHP code via a URL in the CONFIG[gameroot] parameter to (1) server_request...
MediumCVSS 6.8
EPSS 28.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple PHP remote file inclusion vulnerabilities in Quantum Game Library 0.7.2c allow remote attackers to execute arbitrary PHP code via a URL in the CONFIG[gameroot] parameter to (1) server_request.php and (2) qlib/smarty.inc.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| quantum game library | = 0.7.2c | No fix listed |
References
- 29077 third-party-advisory vendor-advisory
- 27945 vdb-entry
- quantumgame-server-file-include(40776) vdb-entry
- 5174 exploit