CVE-2008-6022 PHP remote file inclusion vulnerability in includes/todofleetcontrol.php in an older version of Xnova, possibly 0.8 sp1, allows remote attackers to execute arbitrary PHP code via a URL in the ugamela_...
HighCVSS 7.5
EPSS 2.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
PHP remote file inclusion vulnerability in includes/todofleetcontrol.php in an older version of Xnova, possibly 0.8 sp1, allows remote attackers to execute arbitrary PHP code via a URL in the ugamela_root_path parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xnova | = 0.8-sp1 | No fix listed |
References
- 30715 exploit vdb-entry
- xnova-todofleetcontrol-file-include(44513) vdb-entry
- 6254 exploit