CVE-2008-2198

MEDIO 6.8CVE-2008-2198 · Published 14/05/2008 · updated 16/06/2026

In breve

CVE-2008-2198 è una vulnerabilità MEDIO (CVSS 6.8) che riguarda tellfriend (kmita tellfriend).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.7%, superiore al 86.1% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
tellfriend kmita_tellfriend	`≤ 2.0`	No fix yet

Description

PHP remote file inclusion vulnerability in kmitaadmin/kmitat/htmlcode.php in Kmita Tellfriend 2.0 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the file parameter.

References

advisories.echo.or.id/adv/adv93-K-159-2008.txt
securityreason.com/securityalert/3877
securityfocus.com/archive/1/491616/100/0/threaded
securityfocus.com/bid/29042 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/42186
exploit-db.com/exploits/5544

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free