CVE-2008-4138
technote technote: no CVSS score yet. EPSS 10% chance of exploitation in the next 30 days.
PHP remote file inclusion vulnerability in skin_shop/standard/3_plugin_twindow/twindow_notice.php in TECHNOTE 7 allows remote attackers to execute arbitrary PHP code via a URL in the shop_this_skin_path parameter.
- EPSS
- 10% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-11-01)
- CWE
- CWE-94
- Published
- Modified
- Record from
- the NVD, synced