Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2008-3763

EPSS 12.08% · P94
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2008-3763

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Variable overwrite vulnerability in libsecure.php in Turnkey PHP Live Helper 2.0.1 and earlier, when register_globals is enabled, allows remote attackers to overwrite arbitrary variables related to the db config file. NOTE: this can be leveraged for code injection by overwriting the language file.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Turnkey PHPLiveHelper libsecure.php 变量重写漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Turnkey PHP Live Helper是一套PHP编写的在线客户系统。 PHP Live Helper 2.0.1及其之前版本的版本中libsecure.php中存在变量覆盖漏洞。当register_globals开启时,远程攻击者可以利用此漏洞重写环境变量,可能设计数据库配置、代码注入等安全问题。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2008-3763

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2008-3763

登录查看更多情报信息。

Same Patch Batch · n/a · 2008-08-21 · 18 CVEs total

CVE-2008-3756YourFreeWorld ViralMarketin tr.php SQL注入漏洞
CVE-2008-3765QuickPoll SQL注入漏洞
CVE-2008-3764Turnkey PHPLiveHelper chat.php 远程执行代码漏洞
CVE-2008-3762Turnkey PHPLiveHelper onlinestatus_html.php SQL注入漏洞
CVE-2008-3761Vmware软件 hcmon.sys 本地拒绝服务漏洞
CVE-2008-3760Vanilla people.php 跨站伪造请求漏洞
CVE-2008-3759Vanilla ajax/UpdateCheck.php 跨站伪造请求漏洞
CVE-2008-3758Vanilla 多个跨站脚本攻击漏洞
CVE-2008-3757YourFreeWorld ForcedMatrixScript tr1.php SQL注入漏洞
CVE-2008-3748ActivePHPBookmarks view_group.php SQL注入漏洞
CVE-2008-3755YourFreeWorld Classifieds Script SQL注入漏洞
CVE-2008-3754YourFreeWorld StylishTextAdsScript trl.php SQL注入漏洞
CVE-2008-3753YourFreeWorld ProgramsRatingScript details.php SQL注入漏洞
CVE-2008-3752YourFreeWorld Ad-ExchangeScript tr.php SQL注入漏洞
CVE-2008-3751YourFreeWorld Short Url&UrlTracker tr.php SQL注入漏洞
CVE-2008-3750YourFreeWorld URLRotatorScript tr.php SQL注入漏洞
CVE-2008-3749YourFreeWorld Classifieds Script SQL注入漏洞

IV. Related Vulnerabilities

V. Comments for CVE-2008-3763

No comments yet


Leave a comment