Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Kelli Shaver Subscribe
Filtered by product S8forum
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2003-1252 1 Kelli Shaver 1 S8forum 2008-09-05 7.5 HIGH N/A
register.php in S8Forum 3.0 allows remote attackers to execute arbitrary PHP commands by creating a user whose name ends in a .php extension and entering the desired commands into the E-mail field, which creates a web-accessible .php file that can be called by the attacker, as demonstrated using a "system($cmd)" E-mail address with a "any_name.php" username.