CVE-2008-1860

EPSS 3.0%

Static code injection vulnerability in admin.php in LokiCMS 0.3.3 and earlier allows remote attackers to inject arbitrary PHP code into includes/Config.php via the default parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/5408unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/29749 https://exchange.xforce.ibmcloud.com/vulnerabilities/41736 https://www.exploit-db.com/exploits/5408 http://www.securityfocus.com/archive/1/492877/100/0/threaded http://www.vupen.com/english/advisories/2008/1162/references