7.5
CVSSv2

CVE-2009-0966

Published: 19/03/2009 Updated: 29/09/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

PHP remote file inclusion vulnerability in cross.php in YABSoft Mega File Hosting 1.2 allows remote malicious users to execute arbitrary PHP code via a URL in the url parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. (dot dot) sequences.

Most Upvoted Vulmon Research Post

There is no Researcher post for this vulnerability
Would you like to share something about it? Sign up now to share your knowledge with the community.
Vulnerable Product Search on Vulmon Subscribe to Product

yabsoft mega file hosting script 1.2

Exploits

##################################################### # Mega File Hosting || Remote/Local File inclusion # # For # # All Version # ##################################################### ############################################# Just addition This Exploit and enjoy # ############################################# /crossphp?url=htt ...