VulnerabilityModified

CVE-2008-1046

PHP remote file inclusion vulnerability in footer.php in Quinsonnas Mail Checker 1.55 allows remote attackers to execute arbitrary PHP code via a URL in the op[footer_body] parameter.

MEDIUM 6.8EPSS 21.4%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 21.4%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.

Description

PHP remote file inclusion vulnerability in footer.php in Quinsonnas Mail Checker 1.55 allows remote attackers to execute arbitrary PHP code via a URL in the op[footer_body] parameter.

CVSS 2.0: 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS: 21.42% probability · 97th percentile
CISA KEV: Not listed
Weakness: CWE-94
Affected: quinsonnas/quinsonnas mail checker
Source: cve@mitre.org

References

https://www.exploit-db.com/exploits/5176
https://www.exploit-db.com/exploits/5176

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.