CVE-2008-4137

Published: Sep 24, 2008Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

PHP remote file inclusion vulnerability in footer.php in PHP-Crawler 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the footer_file parameter.

Affected (3)

Products: Php Crawler: Php Crawler

Php Crawler

1 product

Php Crawler

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Php Crawler Php Crawler	Up to 0.7.6
Php Crawler Php Crawler	Up to 0.8
Php Crawler Php Crawler	Up to 0.7.7

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (10)

http://www.securityfocus.com/bid/31217

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/31217/exploit

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2008/2610

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/45213

Source: cve@mitre.org

https://www.exploit-db.com/exploits/6475

Source: cve@mitre.org

http://www.securityfocus.com/bid/31217