CVE-2008-3311

EUVD-2008-3299 · Published Jul 25, 2008

PHP remote file inclusion vulnerability in config.php in Adam Scheinberg Flip 3.0 allows remote attackers to execute arbitrary PHP code via a URL in the incpath parameter.

Technologies

Adam_Scheinberg Flip

Weaknesses

CWE-94

CVSS scores

v2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access Stealth

T1190Exploit Public-Facing Application T1027.006HTML Smuggling T1027.009Embedded Payloads T1564.009Resource Forking

References

http://www.securityfocus.com/bid/30312
http://securityreason.com/securityalert/4040
http://www.securityfocus.com/archive/1/494585/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/43943

Potentially impacted assets

See if this affects your attack surface