CVE-2008-5060

Published: Nov 13, 2008Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Multiple PHP remote file inclusion vulnerabilities in ModernBill 4.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the DIR parameter to (1) export_batch.inc.php, (2) run_auto_suspend.cron.php, and (3) send_email_cache.php in include/scripts/; (4) include/misc/mod_2checkout/2checkout_return.inc.php; and (5) include/html/nettools.popup.php, different vectors than CVE-2006-4034 and CVE-2005-1054.

Affected (16)

Products: Modernbill: Modernbill

Modernbill

1 product

Modernbill

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Modernbill Modernbill	Up to 4.4
Modernbill Modernbill	Up to 4.4.0
Modernbill Modernbill	Version 2.01
Modernbill Modernbill	Version 2.02s
Modernbill Modernbill	Version 3.0 beta
Modernbill Modernbill	Version 3.1.0
Modernbill Modernbill	Version 3.1.3
Modernbill Modernbill	Version 4.0.1 rc7
Modernbill Modernbill	Version 4.0.1 rc8
Modernbill Modernbill	Version 4.0.2
Modernbill Modernbill	Version 4.1.1
Modernbill Modernbill	Version 4.1.2
Modernbill Modernbill	Version 4.1.3
Modernbill Modernbill	Version 4.2.1
Modernbill Modernbill	Version 4.3.0
Modernbill Modernbill	Version 4.3.2