CVE-2008-5938

PHP remote file inclusion vulnerability in assets/snippets/reflect/snippet.reflect.php in MODx CMS 0.9.6.2 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the reflectbase parameter...

CVE-2008-5938

The vulnerability CVE-2008-5938 affects MODx CMS ≤ 0.9.6.2, where PHP remote file inclusion is possible through assets/snippets/reflect/snippet.reflect.php via the reflect_base parameter when magic_quotes_gpc is disabled. This could allow an attacker to execute arbitrary PHP code on the server. C...