CVE-2008-6761

no score yetEPSS 6.3%

Static code injection vulnerability in admin/install.php in Flexcustomer 0.0.6 might allow remote attackers to inject arbitrary PHP code into const.inc.php via the installdbname parameter (aka the Database Name field). NOTE: the installation instructions specify deleting admin/install.php.

EPSS: 6.3% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2009-04-28
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

china-on-site:flexcustomer0.0.6

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/47652
https://www.exploit-db.com/exploits/7622
https://exchange.xforce.ibmcloud.com/vulnerabilities/47652
https://www.exploit-db.com/exploits/7622

Check your stack JSON