Vulnerability Database

296,349

Total vulnerabilities in the database

CVE-2008-2192

Static code injection vulnerability in box/minichat/boxpop.php in IT!CMS (aka itcms) 1.9 allows remote attackers to inject arbitrary PHP code into box/MiniChat/data/shouts.php via the shout parameter.

  • Published: May 14, 2008
  • Updated: Apr 13, 2023
  • CVE: CVE-2008-2192
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 10
  • AV:N/AC:L/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
itcms / itcms 1.9 1.9.x