CVE-2008-0300 | BDVDB-2026-29678 Detail

Description#

mapFiler.php in Mapbender 2.4 to 2.4.4 allows remote attackers to execute arbitrary PHP code via PHP code sequences in the factor parameter, which are not properly handled when accessing a filename that contains those sequences.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.redteam-pentesting.de/advisories/rt-sa-2008-001.php
https://www.exploit-db.com/exploits/5232
http://www.securityfocus.com/bid/28195
https://exchange.xforce.ibmcloud.com/vulnerabilities/41131
http://secunia.com/advisories/29329

Exploit#

https://www.exploit-db.com/exploits/5232

History#

Version 12008-03-11Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.