CVE-2008-3401 PHP remote file inclusion vulnerability in hioxRandomAd.php in HIOX Random Ad (HRA) 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the hm parameter.
HighCVSS 7.5
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in hioxRandomAd.php in HIOX Random Ad (HRA) 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the hm parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hscripts hiox random ad | = 1.3 | No fix listed |
References
- 31300 third-party-advisory
- 4082 third-party-advisory
- 20080730 HIOX Random Ad 1.3 (hioxRandomAd.php hm) RFI Vulnerability mailing-list
- 30435 vdb-entry
- hioxrandomad-hm-file-include(44061) vdb-entry
- 6161 exploit