high7.5Public exploit code
CVE-2008-2854
Multiple PHP remote file inclusion vulnerabilities in Orlando CMS 0.6 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[preloc] par…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Orlando CMS 0.6 - Remote File Inclusion2008-06-19 · webapps · php · Verified
Impact
Multiple PHP remote file inclusion vulnerabilities in Orlando CMS 0.6 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[preloc] parameter to (1) modules/core/logger/init.php and (2) AJAX/newscat.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Orlando Cms | Orlando Cms | Version 0.6 |