CVE-2008-1416
Last modified
CVE-2008-1416 is a vulnerability of currently unknown severity. Multiple PHP remote file inclusion vulnerabilities in PHPauction GPL 2.51 allow remote attackers to execute arbitrary PHP code via a URL in the include_path parameter to (1) converter.inc.php, (2) messages.inc.php, and (3) settings.inc.php in includes/.. EPSS estimates a 34.84% chance of exploitation in the next 30 days.
Description
Multiple PHP remote file inclusion vulnerabilities in PHPauction GPL 2.51 allow remote attackers to execute arbitrary PHP code via a URL in the include_path parameter to (1) converter.inc.php, (2) messages.inc.php, and (3) settings.inc.php in includes/.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Phpauction | Phpauction Gpl | 2.51 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-1416?
How severe is CVE-2008-1416?
How do I fix CVE-2008-1416?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-1410Directory traversal vulnerability in the PXE Server (pxesrv.…
- CVE-2008-1411The PXE Server (pxesrv.exe) in Acronis Snap Deploy 2.0.0.107…
- CVE-2008-1412Unspecified vulnerability in multiple F-Secure anti-virus pr…
- CVE-2008-1413Cross-site scripting (XSS) vulnerability in search.php in SN…
- CVE-2008-1414Cross-site scripting (XSS) vulnerability in Multiple Time Sh…
- CVE-2008-1415Directory traversal vulnerability in index.php in Multiple T…
- CVE-2008-1417The prerm script in axyl 2.1.7 allows local users to overwri…
- CVE-2008-1419Xiph.org libvorbis 1.2.0 and earlier does not properly handl…
- CVE-2008-1420Integer overflow in residue partition value (aka partvals) e…
- CVE-2008-1421Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2008-1422Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2008-1423Integer overflow in a certain quantvals and quantlist calcul…
Are you affected by CVE-2008-1416?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST