CyberSec.Space Logo
返回 CVE 瀏覽器

CVE-2008-4138

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1330%
EPSS Percentile26.73th
Published2008年9月24日
Last Modified2026年4月23日

Vulnerability Description

PHP remote file inclusion vulnerability in skin_shop/standard/3_plugin_twindow/twindow_notice.php in TECHNOTE 7 allows remote attackers to execute arbitrary PHP code via a URL in the shop_this_skin_path parameter.

Affected Platforms (CPE)

📦
Technote

Technote

= 7

References & Advisories

🔗 http://osvdb.org/48166
🔗 http://secunia.com/advisories/31916
🔗 http://www.securityfocus.com/bid/31222
🔗 http://www.vupen.com/english/advisories/2008/2609
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/45215
🔗 https://www.exploit-db.com/exploits/6478
🔗 http://osvdb.org/48166
🔗 http://secunia.com/advisories/31916

相關漏洞威脅

CVE-2009-04416.8

PHP remote file inclusion vulnerability in skin_shop/standard/2_view_body/body_default.php in TECHNOTE 7.2, when register_globals ...

CVE-2001-00755.0

Directory traversal vulnerability in main.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot dot) attac...

CVE-2001-00745.0

Directory traversal vulnerability in print.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot dot) atta...

CVE-2008-665110.0

Static code injection vulnerability in edithistory.php in OxYProject OxYBox 0.85 allows remote attackers to inject arbitrary PHP c...