CVE-2008-6023 PHP remote file inclusion vulnerability in includes/todofleetcontrol.php in a newer version of Xnova, possibly 0.8 sp1, allows remote attackers to execute arbitrary PHP code via a URL in the xnova_roo...
HighCVSS 7.5
EPSS 2.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
PHP remote file inclusion vulnerability in includes/todofleetcontrol.php in a newer version of Xnova, possibly 0.8 sp1, allows remote attackers to execute arbitrary PHP code via a URL in the xnova_root_path parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xnova | <= 0.8 | No fix listed |
| xnova | = 0.8 | No fix listed |
References
- 30715 exploit vdb-entry
- ADV-2008-2412 vdb-entry
- xnova-xnovarootpath-file-include(48533) vdb-entry
- 6254 exploit