CVE-2008-6958

wap/index.php in Crossday Discuz! Board 6.x and 7.x allows remote authenticated users to execute arbitrary PHP code via the creditsformula parameter...

CVE-2008-6958

CVE-2008-6958 affects Crossday Discuz! Board 6.x and 7.x. The vulnerability resides in wap/index.php where remote authenticated users can execute arbitrary PHP code via the creditsformula parameter. Evidence in multiple feeds confirms the issue and its description; no explicit mitigation or patch...

CVE-2008-6958: Improper Control of Generation of Code

wap/index.php in Crossday Discuz! Board 6.x and 7.x allows remote authenticated users to execute arbitrary PHP code via the creditsformula parameter...