Unscored severity · published Mar 11, 2008
CVE-2008-0300
mapFiler.php in Mapbender 2.4 to 2.4.4 allows remote attackers to execute arbitrary PHP code via PHP code sequences in the factor parameter, which are not properly handled when…
–
CVSS
2%
EPSS
No
On KEV
Description
mapFiler.php in Mapbender 2.4 to 2.4.4 allows remote attackers to execute arbitrary PHP code via PHP code sequences in the factor parameter, which are not properly handled when accessing a filename that contains those sequences.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
Mapbender · Mapbender
2.4; 2.4.1; 2.4.2; 2.4.3; 2.4.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0300
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0300
secunia.com
http://secunia.com/advisories/29329
Exploit
http://www.redteam-pentesting.de/advisories/rt-sa-2008-001.php
Exploit
http://www.securityfocus.com/bid/28195
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/41131
www.exploit-db.com
https://www.exploit-db.com/exploits/5232
More from Mapbender
–
CVE-2008-0301
Multiple SQL injection vulnerabilities in Mapbender 2.4.4 allow remote attackers to execute arbitrary SQL commands via the gaz parameter to mod_gazetteer_edit.php and other…