low2.6Public exploit code
CVE-2008-4164
cron.php in MemHT Portal 3.9.0 and earlier allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MemHT Portal 3.9.0 - Remote Create Shell2008-09-06 · webapps · php · Verified
Impact
cron.php in MemHT Portal 3.9.0 and earlier allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Memht | Memht Portal | through 3.9.0 Versions 3.1, 3.4, 3.4.5, 3.6.0, 3.8.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/4288
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45413
- https://www.exploit-db.com/exploits/6393
- http://securityreason.com/securityalert/4288
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45413
- https://www.exploit-db.com/exploits/6393