high7.5Public exploit code
CVE-2008-2977
Multiple PHP remote file inclusion vulnerabilities in Ourvideo CMS 9.5 allow remote attackers to execute arbitrary PHP code via a URL in the include_connection…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ourvideo CMS 9.5 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting2008-06-23 · webapps · php · Verified
Impact
Multiple PHP remote file inclusion vulnerabilities in Ourvideo CMS 9.5 allow remote attackers to execute arbitrary PHP code via a URL in the include_connection parameter to (1) edit_top_feature.php and (2) edit_topics_feature.php in phpi/.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ourvideo Cms | Ourvideo Cms | Version 9.5 |