Vulnerability in N/a

CVE-2008-2689

PHP remote file inclusion vulnerability in pub/clients.php in BrowserCRM 5.002.00 allows remote attackers to execute arbitrary PHP code via a URL in the bcrm_pub_root parameter.

EPSS: 0.680 (98.6th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

References

30290 (x_refsource_SECUNIA, third-party-advisory)
29598 (vdb-entry, x_refsource_BID)
browsercrm-bcrmpubroot-file-include(42922) (vdb-entry, x_refsource_XF)
5757 (exploit, x_refsource_EXPLOIT-DB)