Back to search
CVE-2008-6983
Published: Aug 18, 2009
Modified: Aug 7, 2024
PUBLISHED
Description
modules/tool/hitcounter.php in devalcms 1.4a allows remote attackers to execute arbitrary PHP code via the HTTP Referer header with a target file specified in the gv_folder_data parameter, as demonstrated by modifying modules/tool/url2header.php.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
31037
vdb-entry
x_refsource_BID
47972
vdb-entry
x_refsource_OSVDB
6369
exploit
x_refsource_EXPLOIT-DB
devalcms-url2header-code-execution(44942)
vdb-entry
x_refsource_XF
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now