CVE-2008-5764

UNKNOWN

PHP remote file inclusion vulnerability in calendar

Published Dec 30, 2008

Modified 1 years ago

Details

PHP remote file inclusion vulnerability in calendar.php in WorkSimple 1.2.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lang parameter.

References

WEB

http://osvdb.org/50726

ADVISORY

http://secunia.com/advisories/33163

ADVISORY

http://securityreason.com/securityalert/4831

WEB

http://www.securityfocus.com/bid/32849

WEB

https://exchange.xforce.ibmcloud.com/vulnerabilities/47361

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2008-5764

DETECTION

https://www.exploit-db.com/exploits/7481

CVSS Analysis

CVSS v2.0

9.3

Exploitability

Access Vector

NetworkAV:N

Access Complexity

MediumAC:M

Authentication

NoneAu:N

Impact

Confidentiality

CompleteC:C

Integrity

CompleteI:C

Availability

CompleteA:C

9.3/AV:N/AC:M/Au:N/C:C/I:C/A:C

Ecosystems

Timeline

PublishedDec 30, 2008

ModifiedAug 7, 2024