6.5
CVSSv2

CVE-2008-6956

Published: 12/08/2009 Updated: 29/09/2017
CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8
VMScore: 655
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Vulnerability Summary

Static code injection vulnerability in admin/admin.php in mxCamArchive 2.2 allows remote authenticated administrators to inject arbitrary PHP code into an unspecified program via the description parameter, which is executed by invocation of index.php. NOTE: some of these details are obtained from third party information.

Vulnerable Product Search on Vulmon Subscribe to Product

infireal mxcamarchive 2.2

Exploits

************************(Bypass Config Download Vulnerability)***************** script: mxcamarchive 22 *************************************************************************** download from:wwwinfirealcom/media/serve/106/mxcamarchive22zip ...