Immunity Canvas: SMALLAXE_INCLUDE

Name| smallaxeinclude ---|--- CVE| CVE-2008-0376 Exploit Pack| CANVAS Description| Smallaxe remote file include Notes| CVE Name: CVE-2008-0376 VENDOR: SmallAxe Solutions Repeatability: Infinite References: http://securityreason.com/exploitalert/3207 CVE Url:...

CVE-2008-0376

The CVE-2008-0376 entry concerns Small Axe Weblog 0.3.1, where a PHP remote file inclusion vulnerability exists in inc/linkbar.php. The root cause is improper handling of the cfile parameter, allowing an attacker to supply a URL that causes arbitrary PHP code execution on the affected server. The...