CVE-2008-2018 The AssignUser function in template.class.php in PHPizabi 0.848b C1 HFP3 performs unsafe macro expansions on strings delimited by '{' and '}' characters, which allows remote authenticated users to obt...
MediumCVSS 4.0
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The AssignUser function in template.class.php in PHPizabi 0.848b C1 HFP3 performs unsafe macro expansions on strings delimited by '{' and '}' characters, which allows remote authenticated users to obtain sensitive information via a comment containing a macro, as demonstrated by a "{user.password}" comment in the profile of the admin user.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpizabi | = 0.848b | No fix listed |
References
- 28954 vdb-entry
- phpizabi-templateclass-info-disclosure(42143) vdb-entry
- 5506 exploit