Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
10
CVSSv2

CVE-2008-4138

Published: 24/09/2008 Updated: 29/09/2017
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Subscribe to Technote

Vulnerability Summary

PHP remote file inclusion vulnerability in skin_shop/standard/3_plugin_twindow/twindow_notice.php in TECHNOTE 7 allows remote malicious users to execute arbitrary PHP code via a URL in the shop_this_skin_path parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

technote technote 7

Exploits

Exploit DB: Technote 7 - 'shop_this_skin_path' Remote File Inclusion
#-----------webDEViL - [ w3bd3vil [at] gmail [dot] com ] -----------# #-----------Technote 7 Remote File Inclusion------------------------# # ----------developers site: wwwtechnotecokr--------------# bash-31# cat technote7/skin_shop/standard/3_plugin_twindow/twindow_noticephp snip $TWIN_SET['dir_path']= "$shop_this_skin_path/3_p ...

References

CWE-94http://www.securityfocus.com/bid/31222http://secunia.com/advisories/31916http://osvdb.org/48166http://www.vupen.com/english/advisories/2008/2609https://exchange.xforce.ibmcloud.com/vulnerabilities/45215https://www.exploit-db.com/exploits/6478https://nvd.nist.govhttps://www.exploit-db.com/exploits/6478/
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-22120CVE-2024-35921CVE-2024-35874brute forceCVE-2024-36080unprivilegedCVE-2024-35917IDORCVE-2024-4947
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook