CVE-2008-6313

2009-02-2711:00:00

mitre

www.cve.org

AI Score

7.2

Confidence

High

EPSS

0.014

Percentile

86.7%

JSON

Directory traversal vulnerability in addedit-render.php in phpAddEdit 1.3, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a URL in the editform parameter. NOTE: PHP remote file inclusion attacks are also likely.