CVE-2008-7123
published 2009-08-31CVE-2008-7123: Static code injection vulnerability in admin/configuration/modifier.php in zKup CMS 2.0 through 2.3 allows remote attackers to inject arbitrary PHP code into…
PriorityP337medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EXPLOIT
EPSS
4.06%
89.4th percentile
Static code injection vulnerability in admin/configuration/modifier.php in zKup CMS 2.0 through 2.3 allows remote attackers to inject arbitrary PHP code into fichiers/config.php via a null byte (%00) in the login parameter in an ajout action, which bypasses the regular expression check.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| zkup | zkup | — | — |
| zkup | zkup | — | — |
| zkup | zkup | — | — |
| zkup | zkup | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://osvdb.org/43082http://secunia.com/advisories/29276http://www.securityfocus.com/bid/28149http://www.zkup.fr/actualite-zkup/maj-critique-v203v204.htmlhttps://www.exploit-db.com/exploits/5220http://osvdb.org/43082http://secunia.com/advisories/29276http://www.securityfocus.com/bid/28149http://www.zkup.fr/actualite-zkup/maj-critique-v203v204.htmlhttps://www.exploit-db.com/exploits/5220
2009-08-31
Published