CVE-2008-4138 PHP remote file inclusion vulnerability in skin_shop/standard/3_plugin_twindow/twindow_notice.php in TECHNOTE 7 allows remote attackers to execute arbitrary PHP code via a URL in the shop_this_skin_pa...
HighCVSS 10.0
EPSS 10.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in skin_shop/standard/3_plugin_twindow/twindow_notice.php in TECHNOTE 7 allows remote attackers to execute arbitrary PHP code via a URL in the shop_this_skin_path parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| technote | = 7 | No fix listed |
References
- 48166 vdb-entry
- 31916 third-party-advisory
- 31222 vdb-entry
- ADV-2008-2609 vdb-entry
- technote-twindownotice-file-include(45215) vdb-entry
- 6478 exploit