CVE-2008-2198

The CVE-2008-2198 entry describes a PHP remote file inclusion vulnerability in Kmita Tellfriend 2.0 and earlier, specifically in kmitaadmin/kmitat/htmlcode.php when register_globals is enabled. The root cause is the ability to specify a URL in the file parameter, allowing an attacker to execute a...