CVE-2008-1067

2008-02-2821:00:00

mitre

www.cve.org

AI Score

7.6

Confidence

Low

EPSS

0.004

Percentile

74.8%

JSON

Multiple PHP remote file inclusion vulnerabilities in phpQLAdmin 2.2.7 allow remote attackers to execute arbitrary PHP code via a URL in the _SESSION[path] parameter to (1) ezmlm.php and (2) tools/update_translations.php.

References

secunia.com/advisories/29076

www.exploit-db.com/exploits/5173