Skip to content

CVE-2008-5167 PHP remote file inclusion vulnerability in layout/default/params.php in Boonex Orca 2.0 and 2.0.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in....

HighCVSS 9.3 EPSS 3.1% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

PHP remote file inclusion vulnerability in layout/default/params.php in Boonex Orca 2.0 and 2.0.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the gConf[dir][layouts] parameter.

Affected products

ProductAffected versionsFixed in
boonex orca = 2.0 No fix listed
boonex orca = 2.0.2 No fix listed

References

  • 30855 third-party-advisory vendor-advisory
  • 4616 third-party-advisory
  • 29974 vdb-entry
  • 5955 exploit
  • 6282 exploit