CVE-2008-7073 PHP remote file inclusion vulnerability in lib/action/rss.php in RSS module 0.1 for Pie Web M{a,e}sher, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a UR...
MediumCVSS 6.8
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in lib/action/rss.php in RSS module 0.1 for Pie Web M{a,e}sher, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lib parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rssmodule rss module | = 0.1 | No fix listed |
| ekkaia pie web | All versions | No fix listed |
References
- 32465 exploit vdb-entry
- www.z0rlu.blogspot.com exploit
- pie-rss-file-include(46834) vdb-entry
- 7225 exploit