CVE-2008-1776
published 2008-04-14CVE-2008-1776: PHP remote file inclusion vulnerability in modules/basicfog/basicfogfactory.class.php in PhpBlock A8.4 allows remote attackers to execute arbitrary PHP code…
PriorityP347medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EXPLOIT
EPSS
24.37%
97.6th percentile
PHP remote file inclusion vulnerability in modules/basicfog/basicfogfactory.class.php in PhpBlock A8.4 allows remote attackers to execute arbitrary PHP code via a URL in the PATH_TO_CODE parameter.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| phpblock | phpblock | — | — |
| phpblock | phpblock | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-9vvf-w8qx-55jp: Multiple PHP remote file inclusion vulnerabilities in PhpBlock A8
ghsa_unreviewed·2022-05-17·CVSS 6.8
CVE-2008-5210 [MEDIUM] CWE-94 GHSA-9vvf-w8qx-55jp: Multiple PHP remote file inclusion vulnerabilities in PhpBlock A8
Multiple PHP remote file inclusion vulnerabilities in PhpBlock A8.5 allow remote attackers to execute arbitrary PHP code via a URL in the PATH_TO_CODE parameter to (1) script/init/createallimagecache.php, (2) allincludefortick.php and (3) test.php in script/tick/, and (4) modules/dungeon/tick/allincludefortick.php, different vectors than CVE-2008-1776.
GHSA
GHSA-gf8m-2mwv-92mg: PHP remote file inclusion vulnerability in modules/basicfog/basicfogfactory
ghsa_unreviewed·2022-05-01
CVE-2008-1776 [MEDIUM] CWE-94 GHSA-gf8m-2mwv-92mg: PHP remote file inclusion vulnerability in modules/basicfog/basicfogfactory
PHP remote file inclusion vulnerability in modules/basicfog/basicfogfactory.class.php in PhpBlock A8.4 allows remote attackers to execute arbitrary PHP code via a URL in the PATH_TO_CODE parameter.
No detection rules found.
2008-04-14
Published