Immunity Canvas: PHPUSERBASE_INCLUDE

Name| phpuserbaseinclude ---|--- CVE| CVE-2008-1043 Exploit Pack| CANVAS Description| phpUserBase Remote File Include Notes| CVE Name: CVE-2008-1043 VENDOR: phpuserbase Repeatability: Infinite References: http://www.milw0rm.com/exploits/5180 CVE Url:...

CVE-2008-1043

Affected software: Linux Web Shop (LWS) PHP User Base 1.3 BETA. Vulnerability type: PHP remote file inclusion in templates/default/header.inc.php. Root cause / vector: remote attackers can supply a URL in the menu parameter, leading to arbitrary PHP code execution. Impact (as stated): arbitrary c...