CVE-2008-6748 Eval injection vulnerability in Megacubo 5.0.7 allows remote attackers to inject and execute arbitrary PHP code via the play action in a mega:// URI.
HighCVSS 9.3
EPSS 3.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Eval injection vulnerability in Megacubo 5.0.7 allows remote attackers to inject and execute arbitrary PHP code via the play action in a mega:// URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| megacubo | = 5.0.7 | No fix listed |
References
- 51106 vdb-entry
- retrogod.altervista.org exploit
- 33326 third-party-advisory vendor-advisory
- 20081230 Megacubo 5.0.7 (mega://) remote eval() injection exploit mailing-list
- 33062 exploit vdb-entry
- megacubo-mega-command-execution(47697) vdb-entry
- 7623 exploit