Vulnerability Details CVE-2008-2686
webinc/bxe/scripts/loadsave.php in Flux CMS 1.5.0 and earlier allows remote attackers to execute arbitrary code by overwriting a PHP file in webinc/bxe/scripts/ via a filename in the XML parameter and PHP sequences in the request body, then making a direct request for this filename.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.048
EPSS Ranking 89.1%
CVSS Severity
CVSS v2 Score 7.5
References
Products affected by CVE-2008-2686
-
cpe:2.3:a:flux_cms:flux_cms:*
-
cpe:2.3:a:flux_cms:flux_cms:1.2
-
cpe:2.3:a:flux_cms:flux_cms:1.3
-
cpe:2.3:a:flux_cms:flux_cms:1.31
-
cpe:2.3:a:flux_cms:flux_cms:1.4