CyberSec.Space Logo
返回 CVE 浏览器

CVE-2008-4138

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1330%
EPSS Percentile26.73th
Published2008年9月24日
Last Modified2026年4月23日

Vulnerability Description

PHP remote file inclusion vulnerability in skin_shop/standard/3_plugin_twindow/twindow_notice.php in TECHNOTE 7 allows remote attackers to execute arbitrary PHP code via a URL in the shop_this_skin_path parameter.

Affected Platforms (CPE)

📦
Technote

Technote

= 7

References & Advisories

🔗 http://osvdb.org/48166
🔗 http://secunia.com/advisories/31916
🔗 http://www.securityfocus.com/bid/31222
🔗 http://www.vupen.com/english/advisories/2008/2609
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/45215
🔗 https://www.exploit-db.com/exploits/6478
🔗 http://osvdb.org/48166
🔗 http://secunia.com/advisories/31916

相关漏洞威胁

CVE-2009-04416.8

PHP remote file inclusion vulnerability in skin_shop/standard/2_view_body/body_default.php in TECHNOTE 7.2, when register_globals ...

CVE-2001-00755.0

Directory traversal vulnerability in main.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot dot) attac...

CVE-2001-00745.0

Directory traversal vulnerability in print.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot dot) atta...

CVE-2008-535310.0

The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and...