CVE-2008-5210 Multiple PHP remote file inclusion vulnerabilities in PhpBlock A8.5 allow remote attackers to execute arbitrary PHP code via a URL in the PATH_TO_CODE parameter to (1) script/init/createallimagecache....
HighCVSS 9.3
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple PHP remote file inclusion vulnerabilities in PhpBlock A8.5 allow remote attackers to execute arbitrary PHP code via a URL in the PATH_TO_CODE parameter to (1) script/init/createallimagecache.php, (2) allincludefortick.php and (3) test.php in script/tick/, and (4) modules/dungeon/tick/allincludefortick.php, different vectors than CVE-2008-1776.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpblock | = a8.5 | No fix listed |
References
- 29143 exploit vdb-entry
- phpblock-pathtocode-file-include(42319) vdb-entry
- 5586 exploit