CVE-2015-6008
published 2015-09-28CVE-2015-6008: install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to execute arbitrary commands via the adminPassword parameter, a…
PriorityP356high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
4.82%
90.9th percentile
install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to execute arbitrary commands via the adminPassword parameter, a different issue than CVE-2015-7381.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| refbase | refbase | <= 0.9.6 | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-368c-mf93-2qrq: Multiple PHP remote file inclusion vulnerabilities in install
ghsa_unreviewed·2022-05-17·CVSS 7.5
CVE-2015-7381 [HIGH] CWE-94 GHSA-368c-mf93-2qrq: Multiple PHP remote file inclusion vulnerabilities in install
Multiple PHP remote file inclusion vulnerabilities in install.php in Web Reference Database (aka refbase) through 0.9.6 allow remote attackers to execute arbitrary PHP code via the (1) pathToMYSQL or (2) databaseStructureFile parameter, a different issue than CVE-2015-6008.
GHSA
GHSA-j3xj-ch76-7557: install
ghsa_unreviewed·2022-05-17·CVSS 7.5
CVE-2015-6008 [HIGH] CWE-78 GHSA-j3xj-ch76-7557: install
install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to execute arbitrary commands via the adminPassword parameter, a different issue than CVE-2015-7381.
No detection rules found.
No writeups or analysis indexed.
2015-09-28
Published