CVE-2008-5764 PHP remote file inclusion vulnerability in calendar.php in WorkSimple 1.2.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lang parameter.
HighCVSS 9.3
EPSS 45.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
PHP remote file inclusion vulnerability in calendar.php in WorkSimple 1.2.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lang parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 2500mhz worksimple | = 1.2.1 | No fix listed |