CVE-2008-1069 in Quantum Game Library
Summary
Multiple PHP remote file inclusion vulnerabilities in Quantum Game Library 0.7.2c allow remote attackers to execute arbitrary PHP code via a URL in the CONFIG[gameroot] parameter to (1) server_request.php and (2) qlib/smarty.inc.php.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
02/28/2008
Disclosure
02/28/2008
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 41273 | Quantum Game Library server_request.php code injection | 94 | Proof-of-Concept | Unavailable | CVE-2008-1069 |