CVE-2008-0300

EPSS 2.0%

mapFiler.php in Mapbender 2.4 to 2.4.4 allows remote attackers to execute arbitrary PHP code via PHP code sequences in the factor parameter, which are not properly handled when accessing a filename that contains those sequences.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/5232unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/29329 https://exchange.xforce.ibmcloud.com/vulnerabilities/41131 https://www.exploit-db.com/exploits/5232 http://www.redteam-pentesting.de/advisories/rt-sa-2008-001.php http://www.securityfocus.com/bid/28195