CVE-2008-2270 Multiple PHP remote file inclusion vulnerabilities in PHPWAY Kostenloses Linkmanagementscript allow remote attackers to execute arbitrary PHP code via a URL in the (1) main_page_directory and (2) page...
HighCVSS 7.5
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple PHP remote file inclusion vulnerabilities in PHPWAY Kostenloses Linkmanagementscript allow remote attackers to execute arbitrary PHP code via a URL in the (1) main_page_directory and (2) page_to_include parameters in template\index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpway kostenloses linkmanagementscript | All versions | No fix listed |
References
- 29234 exploit vdb-entry
- kostenloses-index-file-include(42446) vdb-entry
- 5621 exploit