7.5
CVSSv2

CVE-2008-6491

Published: 19/03/2009 Updated: 17/08/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

PHP remote file inclusion vulnerability in connexion.php in PHPGKit 0.9 allows remote malicious users to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Vulnerable Product Search on Vulmon Subscribe to Product

denis moinel phpgkit 0.9

Exploits

source: wwwsecurityfocuscom/bid/28526/info PhpGKit is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input An attacker can exploit this issue to execute malicious PHP code in the context of the webserver process This may allow the attacker to compromise the application and the underlyin ...