CVEs-PoC/2008/CVE-2008-3166.md

CVE-2008-3166

Description

PHP remote file inclusion vulnerability in modules/global/inc/content.inc.php in BoonEx Ray 3.5, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the sIncPath parameter.

POC

Reference

• http://securityreason.com/securityalert/3994
• https://www.exploit-db.com/exploits/6028

Github

No PoCs found on GitHub currently.