cve/2008/CVE-2008-0300.md

CVE-2008-0300

Description

mapFiler.php in Mapbender 2.4 to 2.4.4 allows remote attackers to execute arbitrary PHP code via PHP code sequences in the factor parameter, which are not properly handled when accessing a filename that contains those sequences.

POC

Reference

• http://www.redteam-pentesting.de/advisories/rt-sa-2008-001.php
• https://www.exploit-db.com/exploits/5232

Github

No PoCs found on GitHub currently.