Security Advisory

CVE-2008-3763

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-08-21 17:00:00
Last updated 2024-08-07 09:53:00
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Variable overwrite vulnerability in libsecure.php in Turnkey PHP Live Helper 2.0.1 and earlier, when register_globals is enabled, allows remote attackers to overwrite arbitrary variables related to the db config file. NOTE: this can be leveraged for code injection by overwriting the language file.