CVEvulnerability
CVE-2008-2074
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-05-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-94
Description
Multiple PHP remote file inclusion vulnerabilities Harris Yusuf Arifin Harris Wap Chat 1.0, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the sysFileDir parameter to (1) eng.writeMsg.php, (2) eng.adCreate.php, (3) eng.adCreateSave.php, (4) eng.adDispByTypeOptions.php, (5) eng.createRoom.php, (6) eng.forward.php, (7) eng.pageLogout.php, (8) eng.resultMember.php, (9) eng.roomDeleteConfirm.php, (10) eng.saveNewRoom.php, and (11) eng.searchMember.php in src/.
Affected configurations
• successkid harris wap chat 1.0
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://secunia.com/advisories/30022 Vendor Advisory
- http://www.securityfocus.com/bid/28995 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42112 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5525 www.exploit-db.com
- http://secunia.com/advisories/30022 Vendor Advisory
- http://www.securityfocus.com/bid/28995 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42112 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5525 www.exploit-db.com