Skip to content
OpenAdvisories
Unscored CVE-2008-2016 EUVD-2008-2014GHSA-qhc8-qcj6-mq9r

PHP remote file inclusion vulnerability in Chilek Content Management System (aka ChiCoMaS) 2.0.4 allows remote attackers to execute arbitra…

Published Apr 30, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in Chilek Content Management System (aka ChiCoMaS) 2.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the lang parameter to the default URI under install/. NOTE: this can also be leveraged to include and execute arbitrary local files via directory traversal sequences.

References