Security Advisory

CVE-2008-1860

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2008-04-17 16:00:00
Last updated 2024-08-07 08:40:59
Assigner mitre
State PUBLISHED

Description

Static code injection vulnerability in admin.php in LokiCMS 0.3.3 and earlier allows remote attackers to inject arbitrary PHP code into includes/Config.php via the default parameter.