cve/2008/CVE-2008-4206.md

CVE-2008-4206

Description

PHP remote file inclusion vulnerability in config.php in Attachmax Dolphin 2.1.0 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the rel_path parameter.

POC

Reference

• http://e-rdc.org/v1/news.php?readmore=108
• http://securityreason.com/securityalert/4307
• https://www.exploit-db.com/exploits/6468

Github

No PoCs found on GitHub currently.