CVE-2008-1051

medium · 6.8

PHP remote file inclusion vulnerability in include/body_comm.inc.php in phpProfiles 4.5.2 BETA allows remote attackers to execute arbitrary PHP code via a URL in the content parameter.

6.8

CVSS

21.4%

EPSS (exploit prob.)

97th

EPSS percentile

2008-02-27

Published

AV:N/AC:M/Au:N/C:P/I:P/A:P

Weaknesses

CWE-94

Affected products

Vendor	Product	Affected versions
phpprofiles	phpprofiles_	4.5.2

Check a specific version with /api/v1/cve/match.

References

http://www.securityfocus.com/bid/27952
https://www.exploit-db.com/exploits/5175
http://www.securityfocus.com/bid/27952
https://www.exploit-db.com/exploits/5175

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2008-1051