CVE-2008-6196

Multiple PHP remote file inclusion vulnerabilities in Philippe CROCHAT EasySite 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the EASYSITE_BASE parameter to (1) browser.php, (2) image_editor.php and (3) skin_chooser.php in configuration/. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Configurations

Configuration 1 (hide)

cpe:2.3:a:philippe_crochat:easysite:2.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2009-02-20 00:30

Updated : 2024-02-28 11:21


NVD link : CVE-2008-6196

Mitre link : CVE-2008-6196

CVE.ORG link : CVE-2008-6196


JSON object : View

Products Affected

philippe_crochat

  • easysite
CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')