CVE-2008-6956 Static code injection vulnerability in admin/admin.php in mxCamArchive 2.2 allows remote authenticated administrators to inject arbitrary PHP code into an unspecified program via the description param...
MediumCVSS 6.5
EPSS 4.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Static code injection vulnerability in admin/admin.php in mxCamArchive 2.2 allows remote authenticated administrators to inject arbitrary PHP code into an unspecified program via the description parameter, which is executed by invocation of index.php. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| infireal mxcamarchive | = 2.2 | No fix listed |
References
- 49887 vdb-entry
- 32751 third-party-advisory vendor-advisory
- mxcamarchive-admin-code-execution(46658) vdb-entry
- 7136 exploit