NVD

Id
6275  
Name
CVE-2008-6544  
Description
** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in Simple Machines Forum (SMF) 1.1.4 allow remote attackers to execute arbitrary PHP code via a URL in the (1) settings[default_theme_dir] parameter to Sources/Subs-Graphics.php and (2) settings[default_theme_dir] parameter to Sources/Themes.php. NOTE: CVE and multiple third parties dispute this issue because the files contain a protection mechanism against direct request.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2009-03-29  
Modified Date
2009-07-21  
Seq
2008-6544  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
36964 6275 CVE-2008-6544 20080328 Re: Smf 1.1.4 Remote File Inclusion Vulnerabilities  View
36965 6275 CVE-2008-6544 20080328 Smf 1.1.4 Remote File Inclusion Vulnerabilities  View
36966 6275 CVE-2008-6544 20080328 Re: Smf 1.1.4 Remote File Inclusion Vulnerabilities  View
36967 6275 CVE-2008-6544 28493  View
36968 6275 CVE-2008-6544 smf-subsgraphics-themes-file-include(41518)  View

Related JVN