CVE-2008-4207
Last modified
CVE-2008-4207 is a vulnerability of currently unknown severity. Attachmax Dolphin 2.1.0 and earlier does not properly protect info.php in the main folder, which allows remote attackers to obtain sensitive information via a direct request, which invokes the phpinfo function. NOTE: some of these details are obtained from third party information.. EPSS estimates a 3.12% chance of exploitation in the next 30 days.
Description
Attachmax Dolphin 2.1.0 and earlier does not properly protect info.php in the main folder, which allows remote attackers to obtain sensitive information via a direct request, which invokes the phpinfo function. NOTE: some of these details are obtained from third party information.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Attachmax | Dolphin | 2.1.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-4207?
How severe is CVE-2008-4207?
How do I fix CVE-2008-4207?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-4201Heap-based buffer overflow in the decodeMP4file function (fr…
- CVE-2008-4202SQL injection vulnerability in index.php in Gonafish LinksCa…
- CVE-2008-4203SQL injection vulnerability in cn_users.php in CzarNews 1.20…
- CVE-2008-4204SQL injection vulnerability in city.asp in SoftAcid Hotel Re…
- CVE-2008-4205SQL injection vulnerability in search.php Attachmax Dolphin …
- CVE-2008-4206PHP remote file inclusion vulnerability in config.php in Att…
- CVE-2008-4208Unspecified vulnerability in OSADS Alliance Database before …
- CVE-2008-4210fs/open.c in the Linux kernel before 2.6.22 does not properl…
- CVE-2008-4211Integer signedness error in (1) QuickLook in Apple Mac OS X …
- CVE-2008-4212Unspecified vulnerability in rlogind in the rlogin component…
- CVE-2008-4214Unspecified vulnerability in Script Editor in Mac OS X 10.4.…
- CVE-2008-4215Weblog in Mac OS X Server 10.4.11 does not properly check an…
Are you affected by CVE-2008-4207?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST