← Database

CVE-2008-6983

HIGH CVSS: 7.5 Published: 2009-08-19 Modified: 2026-06-16

Description

modules/tool/hitcounter.php in devalcms 1.4a allows remote attackers to execute arbitrary PHP code via the HTTP Referer header with a target file specified in the gv_folder_data parameter, as demonstrated by modifying modules/tool/url2header.php.

Affected Platforms

Devalcms Devalcms

Weakness Type

CWE-94

References