peter bassill · operator
$ cve CVE-2008-3022 JSON

CVE-2008-3022 EXPLOIT

7.5
HIGH · CVSS 2.0 · EPSS 2.3% (pctl 83)

Patch early

A public exploit exists.

Description

Multiple PHP remote file inclusion vulnerabilities in sablonlar/gunaysoft/gunaysoft.php in PHPortal 1.2 Beta allow remote attackers to execute arbitrary PHP code via a URL in (1) icerikyolu, (2) sayfaid, and (3) uzanti parameters.

Scoring

CVSS7.5 (HIGH, v2.0)
VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS2.29% — more likely to be exploited than 83% of all CVEs
WeaknessCWE-94
On CISA KEVno
Public exploityes
Published2008-07-07
Last modified2026-06-16

Affected (1)

VendorProduct
phpbbportalphportal

Public exploits

SourceTitleDate
exploit-dbPHPortal 1.2 - Multiple Remote File Inclusions2008-07-02

References

→ the Explorer  ·  watch your stack  ·  NVD