VULNERABILITY INTELLIGENCE

CVE-2008-6023

CVSS score7.5 HIGH

EPSS probability2.34%

CISA KEVNot currently listed

Published2009-02-02

Last modified2026-06-16

Description

PHP remote file inclusion vulnerability in includes/todofleetcontrol.php in a newer version of Xnova, possibly 0.8 sp1, allows remote attackers to execute arbitrary PHP code via a URL in the xnova_root_path parameter.