CVE-2008-1609

Multiple PHP remote file inclusion vulnerabilities in just another flat file (JAF) CMS 4.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL…

published April 1, 2008

CVSS

—

EPSS

44%

Percentile

98.8

In the wild

Unconfirmed

What it is

Multiple PHP remote file inclusion vulnerabilities in just another flat file (JAF) CMS 4.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) website parameter to (a) forum.php, (b) headlines.php, and (c) main.php in forum/, and (2) main_dir parameter to forum/forum.php. NOTE: other main_dir vectors are already covered by CVE-2006-7127.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.44251 · 98.8th percentile
Published: 2008-04-01T16:00Z

EPSS history

Timeline

01 APR 16:00Z
Multiple PHP remote file inclusion vulnerabilities in just another flat file (JAF) CMS 4.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL…
cvelistv5