CVE-2008-1860

2008-04-1716:00:00

mitre

www.cve.org

AI Score

7.3

Confidence

High

EPSS

0.049

Percentile

93.0%

JSON

Static code injection vulnerability in admin.php in LokiCMS 0.3.3 and earlier allows remote attackers to inject arbitrary PHP code into includes/Config.php via the default parameter.

References

secunia.com/advisories/29749

www.securityfocus.com/archive/1/492877/100/0/threaded

www.vupen.com/english/advisories/2008/1162/references

exchange.xforce.ibmcloud.com/vulnerabilities/41736

www.exploit-db.com/exploits/5408