CyberSec.Space Logo
Back to CVE Browser

CVE-2008-0502

HIGH
7.5
CVSS Severity Score
EPSS Score0.1520%
EPSS Percentile12.06th
PublishedJan 31, 2008
Last ModifiedApr 23, 2026

Vulnerability Description

PHP remote file inclusion vulnerability in templates/Official/part_userprofile.php in Connectix Boards 0.8.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the template_path parameter.

Affected Platforms (CPE)

📦
Connectix

Connectix Boards

<= 0.8.2
📦
Connectix

Connectix Boards

= 0.8.1

References & Advisories

🔗 http://secunia.com/advisories/28704
🔗 http://www.securityfocus.com/bid/27506
🔗 http://www.vupen.com/english/advisories/2008/0363
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/40040
🔗 https://www.exploit-db.com/exploits/5012
🔗 http://secunia.com/advisories/28704
🔗 http://www.securityfocus.com/bid/27506
🔗 http://www.vupen.com/english/advisories/2008/0363

Related Vulnerabilities

CVE-2007-12546.5

SQL injection vulnerability in part.userprofile.php in Connectix Boards 0.7 and earlier allows remote authenticated users to execu...

CVE-2007-12556.0

Unrestricted file upload vulnerability in admin.bbcode.php in Connectix Boards 0.7 and earlier allows remote authenticated adminis...

CVE-2008-540310.0

Heap-based buffer overflow in the XML parser in the AIM plugin in Trillian before 3.1.12.0 allows remote attackers to execute arbi...

CVE-2008-024410.0

SAP MaxDB 7.6.03 build 007 and earlier allows remote attackers to execute arbitrary commands via "&&" and other shell metacharacte...