CVE-2008-2192 Static code injection vulnerability in box/minichat/boxpop.php in IT!CMS (aka itcms) 1.9 allows remote attackers to inject arbitrary PHP code into box/MiniChat/data/shouts.php via the shout parameter.
HighCVSS 10.0
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Static code injection vulnerability in box/minichat/boxpop.php in IT!CMS (aka itcms) 1.9 allows remote attackers to inject arbitrary PHP code into box/MiniChat/data/shouts.php via the shout parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| itcms | = 1.9 | No fix listed |
References
- 30059 third-party-advisory vendor-advisory
- 29028 vdb-entry
- itcms-boxpop-file-include(42172) vdb-entry
- 5532 exploit