7.5
CVSSv2

CVE-2008-4206

Published: 24/09/2008 Updated: 11/10/2018
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

PHP remote file inclusion vulnerability in config.php in Attachmax Dolphin 2.1.0 and previous versions, when register_globals is enabled, allows remote malicious users to execute arbitrary PHP code via a URL in the rel_path parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

attachmax dolphin 2.1.0

Exploits

____________________ ___ ___ ________ \_ _____/\_ ___ \ / | \\_____ \ | __)_ / \ \// ~ \/ | \ | \\ \___\ Y / | \ /_______ / \______ /\___|_ /\_______ / \/ \/ \/ \/ ORID ECHO_ADV_101$2008 ---------------------------- ...