CVE-2008-3207

PHP remote file inclusion vulnerability in cms/modules/form.lib.php in Pragyan CMS 2.6.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the (1) sourceFolder or (2) moduleFolder parameter.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

5.58% chance of exploitation in the next 30 days, 92th percentile

Published

2008-07-18

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/6078

References

• CVE Record
• NVD entry

Related

• CVE-2008-3206
• CVE-2008-3208
• CVE-2008-3205
• CVE-2008-3209
• CVE-2008-3204
• CVE-2008-3210