CVE-2008-7152: Code Injection
Multiple PHP remote file inclusion vulnerabilities in Specimen Image Database (SID), when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the dir parameter to (1) client.php or (2) taxonservice.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-7152?
The severity of CVE-2008-7152 is rated as medium with a score of 6.8.
How do I fix CVE-2008-7152?
To fix CVE-2008-7152, disable register_globals in your PHP configuration and ensure that user inputs are properly sanitized.
What software is affected by CVE-2008-7152?
The affected software for CVE-2008-7152 is the Specimen Image Database (SID) developed by Simon Rycroft.
What is the impact of CVE-2008-7152?
CVE-2008-7152 allows remote attackers to execute arbitrary PHP code, leading to potential data compromise and full system exploitation.
What are the components involved in CVE-2008-7152?
CVE-2008-7152 involves multiple PHP files, specifically client.php and taxonservice.php, that are vulnerable when register_globals is enabled.