CVE-2008-1074 in Group E
Summary
PHP remote file inclusion vulnerability in lib/head_auth.php in GROUP-E 1.6.41 allows remote attackers to execute arbitrary PHP code via a URL in the CFG[PREPEND_FILE] parameter.
Reservation
02/28/2008
Disclosure
02/28/2008
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 41278 | Group E head_auth.php code injection | 94 | Proof-of-Concept | Not defined | CVE-2008-1074 |