CVE-2008-4206

2008-09-2414:00:00

mitre

www.cve.org

7.5 High

AI Score

Confidence

High

0.02 Low

EPSS

Percentile

88.8%

JSON

PHP remote file inclusion vulnerability in config.php in Attachmax Dolphin 2.1.0 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the rel_path parameter.

References

e-rdc.org/v1/news.php?readmore=108

osvdb.org/48269

secunia.com/advisories/31794

securityreason.com/securityalert/4307

www.securityfocus.com/archive/1/496427/100/0/threaded

www.securityfocus.com/bid/31207

www.exploit-db.com/exploits/6468