Security Advisory

CVE-2008-4138

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2008-09-19 18:00:00
Last updated 2024-08-07 10:08:34
Assigner mitre
State PUBLISHED

Description

PHP remote file inclusion vulnerability in skin_shop/standard/3_plugin_twindow/twindow_notice.php in TECHNOTE 7 allows remote attackers to execute arbitrary PHP code via a URL in the shop_this_skin_path parameter.