CVE-2008-6403 PHP remote file inclusion vulnerability in themes/default/include/html/insert.inc.php in OpenRat 0.8-beta4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tpl_dir pa...
HighCVSS 7.5
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in themes/default/include/html/insert.inc.php in OpenRat 0.8-beta4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tpl_dir parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openrat | <= 0.8-beta4 | No fix listed |
| openrat | = 0.8-beta1 | No fix listed |
References
- 31339 exploit vdb-entry
- openrat-insertinc-file-include(45363) vdb-entry
- 6538 exploit