← back
CVE-2008-3763

CVE-2008-3763

EPSS 2.6%
Variable overwrite vulnerability in libsecure.php in Turnkey PHP Live Helper 2.0.1 and earlier, when register_globals is enabled, allows remote attackers to overwrite arbitrary variables related to the db config file. NOTE: this can be leveraged for code injection by overwriting the language file.
Affected products
n/a · n/a
public PoCs found — 1
cve_referencewww.exploit-db.com/exploits/6261unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://demos.turnkeywebtools.com/phplivehelper/docs/change_log.txthttp://secunia.com/advisories/31521http://securityreason.com/securityalert/4178https://exchange.xforce.ibmcloud.com/vulnerabilities/44570https://www.exploit-db.com/exploits/6261http://www.gulftech.org/?node=research&article_id=00124-08162008http://www.securityfocus.com/archive/1/495542/100/0/threadedhttp://www.securityfocus.com/bid/30729