CVE-2008-5167
published 2008-11-19CVE-2008-5167: PHP remote file inclusion vulnerability in layout/default/params.php in Boonex Orca 2.0 and 2.0.2, when register_globals is enabled, allows remote attackers to…
PriorityP345critical9.3CVSS 2.0
AVNACMAuNCCICAC
EXPLOIT
EPSS
3.14%
86.3th percentile
PHP remote file inclusion vulnerability in layout/default/params.php in Boonex Orca 2.0 and 2.0.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the gConf[dir][layouts] parameter.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| boonex | orca | — | — |
| boonex | orca | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://secunia.com/advisories/30855http://securityreason.com/securityalert/4616http://www.securityfocus.com/bid/29974https://www.exploit-db.com/exploits/5955https://www.exploit-db.com/exploits/6282http://secunia.com/advisories/30855http://securityreason.com/securityalert/4616http://www.securityfocus.com/bid/29974https://www.exploit-db.com/exploits/5955https://www.exploit-db.com/exploits/6282
2008-11-19
Published