VULNERABILITY INTELLIGENCE

CVE-2008-6748

CVSS score9.3 HIGH
EPSS probability3.74%
CISA KEVNot currently listed
Published2009-04-24
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Eval injection vulnerability in Megacubo 5.0.7 allows remote attackers to inject and execute arbitrary PHP code via the play action in a mega:// URI.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references