CyberSec.Space Logo
Back to CVE Browser

CVE-2008-4138

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1330%
EPSS Percentile26.73th
PublishedSep 24, 2008
Last ModifiedApr 23, 2026

Vulnerability Description

PHP remote file inclusion vulnerability in skin_shop/standard/3_plugin_twindow/twindow_notice.php in TECHNOTE 7 allows remote attackers to execute arbitrary PHP code via a URL in the shop_this_skin_path parameter.

Affected Platforms (CPE)

📦
Technote

Technote

= 7

References & Advisories

🔗 http://osvdb.org/48166
🔗 http://secunia.com/advisories/31916
🔗 http://www.securityfocus.com/bid/31222
🔗 http://www.vupen.com/english/advisories/2008/2609
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/45215
🔗 https://www.exploit-db.com/exploits/6478
🔗 http://osvdb.org/48166
🔗 http://secunia.com/advisories/31916

Related Vulnerabilities

CVE-2009-04416.8

PHP remote file inclusion vulnerability in skin_shop/standard/2_view_body/body_default.php in TECHNOTE 7.2, when register_globals ...

CVE-2001-00755.0

Directory traversal vulnerability in main.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot dot) attac...

CVE-2001-00745.0

Directory traversal vulnerability in print.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot dot) atta...

CVE-2008-221410.0

Stack-based buffer overflow in the Network Manager in Castle Rock Computing SNMPc 7.1 and earlier allows remote attackers to cause...