CVE-2008-1405 PHP remote file inclusion vulnerability in code/display.php in fuzzylime (cms) 3.01 allows remote attackers to execute arbitrary PHP code via a URL in the admindir parameter.
MediumCVSS 6.8
EPSS 37.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
PHP remote file inclusion vulnerability in code/display.php in fuzzylime (cms) 3.01 allows remote attackers to execute arbitrary PHP code via a URL in the admindir parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fuzzylime | = 3.01 | No fix listed |
References
- irk4z.wordpress.com
- 29417 third-party-advisory vendor-advisory
- ADV-2008-0912 vdb-entry vendor-advisory
- fuzzylime-display-file-include(41221) vdb-entry
- 5260 exploit