CVE-2008-6958 wap/index.php in Crossday Discuz! Board 6.x and 7.x allows remote authenticated users to execute arbitrary PHP code via the creditsformula parameter.
MediumCVSS 6.5
EPSS 5.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
wap/index.php in Crossday Discuz! Board 6.x and 7.x allows remote authenticated users to execute arbitrary PHP code via the creditsformula parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| comsenz crossday discuz board | = 6.0.1 | No fix listed |
| comsenz crossday discuz board | = 7.0 | No fix listed |
References
- 50202 vdb-entry
- 32731 third-party-advisory vendor-advisory
- www.80vul.com exploit
- www.discuz.net exploit
- 32303 exploit vdb-entry
- discuz-index-code-execution(46644) vdb-entry
- 7119 exploit