CVE-2008-2905

EPSS 18.4%

PHP remote file inclusion vulnerability in includes/Cache/Lite/Output.php in the Cache_Lite package in Mambo 4.6.4 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Affected products

n/a · n/a

public PoCs found — 3

exploitdbwww.exploit-db.com/exploits/16912unverified cve_referencewww.exploit-db.com/exploits/5808unverified exploitdbwww.exploit-db.com/exploits/9906unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/30685 https://exchange.xforce.ibmcloud.com/vulnerabilities/43101 https://www.exploit-db.com/exploits/5808 http://www.securityfocus.com/bid/29716 http://www.securitytracker.com/id?1020295