CVE-2008-1876

2008-04-1717:00:00

mitre

www.cve.org

php

visualpic

vulnerability

remote execution

url parameter

AI Score

7.5

Confidence

High

EPSS

0.027

Percentile

90.6%

JSON

PHP remote file inclusion vulnerability in index.php in VisualPic 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the _CONFIG[files][functions_page] parameter.

References

www.vupen.com/english/advisories/2008/1127/references

exchange.xforce.ibmcloud.com/vulnerabilities/41667

www.exploit-db.com/exploits/5375