CVE-2008-2396

2008-05-2110:00:00

mitre

www.cve.org

7.6 High

AI Score

Confidence

High

0.029 Low

EPSS

Percentile

90.8%

JSON

PHP remote file inclusion vulnerability in index.php in Wajox Software microSSys CMS 1.5 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in an arbitrary element of the PAGES array parameter.