CVE-2008-6761

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0650%

EPSS Percentile28.82th

Published2009年4月28日

Last Modified2026年4月23日

Vulnerability Description

Static code injection vulnerability in admin/install.php in Flexcustomer 0.0.6 might allow remote attackers to inject arbitrary PHP code into const.inc.php via the installdbname parameter (aka the Database Name field). NOTE: the installation instructions specify deleting admin/install.php.

Affected Platforms (CPE)

📦

China On Site

Flexcustomer0.0.6

All versions

References & Advisories

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/47652

🔗 https://www.exploit-db.com/exploits/7622