RCE in Phpdmca

CVE-2008-2986

Multiple PHP remote file inclusion vulnerabilities in phpDMCA 1.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the ourlinux_root_path parameter to (1) adodb-errorpear.inc.php and (2) adodb-pear.inc.php in adodb/.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.023 (81.5th percentile) — read the EPSS interpretation.

Affected products

  • Phpdmca — versions 1.0.0
  • N/a — versions n/a

Weakness classification (CWE)

References