CVE-2008-3769
published 2008-08-22CVE-2008-3769: PHP remote file inclusion vulnerability in admin/create_order_new.php in Freeway 1.4.1.171, when register_globals is enabled, allows remote attackers to…
PriorityP432medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
1.22%
64.9th percentile
PHP remote file inclusion vulnerability in admin/create_order_new.php in Freeway 1.4.1.171, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the include_page parameter.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| openfreeway | freeway | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/31475http://securityreason.com/securityalert/4181http://www.openfreeway.org/download/change-log.htmlhttp://www.securityfocus.com/archive/1/495549/100/0/threadedhttps://exchange.xforce.ibmcloud.com/vulnerabilities/45036http://secunia.com/advisories/31475http://securityreason.com/securityalert/4181http://www.openfreeway.org/download/change-log.htmlhttp://www.securityfocus.com/archive/1/495549/100/0/threadedhttps://exchange.xforce.ibmcloud.com/vulnerabilities/45036
2008-08-22
Published