CVE-2008-6223

EUVD-2008-6193 · Published Feb 20, 2009

PHP remote file inclusion vulnerability in visualizza.php in Way Of The Warrior (WOTW) 5.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the plancia parameter to crea.php.

Technologies

Wotw Way Of The Warrior

Weaknesses

CWE-94

CVSS scores

v2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access Stealth

T1190Exploit Public-Facing Application T1027.006HTML Smuggling T1027.009Embedded Payloads T1564.009Resource Forking

References

https://www.exploit-db.com/exploits/6992
http://secunia.com/advisories/32515
http://www.securityfocus.com/bid/32115
https://exchange.xforce.ibmcloud.com/vulnerabilities/46341

Potentially impacted assets

See if this affects your attack surface