CVE-2008-5764

2008-12-3020:00:00

mitre

www.cve.org

AI Score

7.5

Confidence

High

EPSS

0.018

Percentile

88.1%

JSON

PHP remote file inclusion vulnerability in calendar.php in WorkSimple 1.2.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lang parameter.

References

osvdb.org/50726

secunia.com/advisories/33163

securityreason.com/securityalert/4831

www.securityfocus.com/bid/32849

exchange.xforce.ibmcloud.com/vulnerabilities/47361

www.exploit-db.com/exploits/7481