Security Advisory

CVE-2008-4141

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2008-09-19 18:00:00
Last updated 2024-08-07 10:08:34
Assigner mitre
State PUBLISHED

Description

Multiple PHP remote file inclusion vulnerabilities in x10Media x10 Automatic MP3 Script 1.5.5 allow remote attackers to execute arbitrary PHP code via a URL in the web_root parameter to (1) includes/function_core.php and (2) templates/layout_lyrics.php.