CVE-2008-7152 Multiple PHP remote file inclusion vulnerabilities in Specimen Image Database (SID), when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the dir paramet...
MediumCVSS 6.8
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple PHP remote file inclusion vulnerabilities in Specimen Image Database (SID), when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the dir parameter to (1) client.php or (2) taxonservice.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| simon rycroft sid | All versions | No fix listed |
References
- 28142 exploit vdb-entry
- www.securityfocus.com exploit
- sid-dir-file-include(41097) vdb-entry