CVE-2008-0138

PHP remote file inclusion vulnerability in xoopsgallery/init_basic.php in the mod_gallery module for XOOPS, when register_globals is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the GALLERY_BASEDIR parameter.
SQL Injection
Severity
UNKNOWN
AV:N/AC:M/Au:N/C:P/I:P/A:P
Atk. Vector
NETWORK
Atk. Complexity
MEDIUM
Base Score
CVSS 3.x
EPSS Score
Percentile: 83%
VendorProductVersion
xoopsxoopsgallery_module
1.3.3_9
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/27155
https://exchange.xforce.ibmcloud.com/vulnerabilities/39461
https://www.exploit-db.com/exploits/4847
http://www.securityfocus.com/bid/27155
https://exchange.xforce.ibmcloud.com/vulnerabilities/39461
https://www.exploit-db.com/exploits/4847