CVE-2008-5764

PHP remote file inclusion vulnerability in calendar.php in WorkSimple 1.2.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lang parameter.
Configurations

Configuration 1 (hide)

cpe:2.3:a:2500mhz:worksimple:1.2.1:*:*:*:*:*:*:*

History

No history.

Information

Published : 2008-12-30 20:30

Updated : 2024-02-04 17:33


NVD link : CVE-2008-5764

Mitre link : CVE-2008-5764

CVE.ORG link : CVE-2008-5764


JSON object : View

Products Affected

2500mhz

  • worksimple
CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')