← Database

CVE-2008-5066

CRITICAL CVSS: 10.0 Published: 2008-11-13 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in upload/admin/frontpage_right.php in Agares Media ThemeSiteScript 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the loadadminpage parameter.

Affected Platforms

Agaresmedia Themesitescript

Weakness Type

CWE-94

References