CVE-2008-0300

critical

Description

mapFiler.php in Mapbender 2.4 to 2.4.4 allows remote attackers to execute arbitrary PHP code via PHP code sequences in the factor parameter, which are not properly handled when accessing a filename that contains those sequences.

References

https://www.exploit-db.com/exploits/5232

https://exchange.xforce.ibmcloud.com/vulnerabilities/41131

http://secunia.com/advisories/29329

Details

Source: Mitre, NVD

Published: 2008-03-11

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.01945

Detections

Analytics