CVE-2008-0442

Small Axe Weblog 0.3.1 - Remote Code Execution via ffile Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-0442. PoCs published by RoMaNcYxHaCkEr.

AI-analyzed exploit summary This exploit demonstrates a Remote File Include (RFI) vulnerability in Small Axe Weblog 0.3.1 via the 'cfile' parameter in 'linkbar.php'. The vulnerability allows an attacker to include and execute arbitrary remote files, leading to potential remote code execution (RCE).

Description

PHP remote file inclusion vulnerability in inc/linkbar.php in Small Axe Weblog 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the ffile parameter, a different vector than CVE-2008-0376. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Exploits (1)

exploitdb WORKING POC VERIFIED

by RoMaNcYxHaCkEr · textwebappsphp

https://www.exploit-db.com/exploits/4937

View Code ZIP pw:eip

This exploit demonstrates a Remote File Include (RFI) vulnerability in Small Axe Weblog 0.3.1 via the 'cfile' parameter in 'linkbar.php'. The vulnerability allows an attacker to include and execute arbitrary remote files, leading to potential remote code execution (RCE).

Classification

Working Poc 90%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: Small Axe Weblog 0.3.1

No auth needed

Prerequisites: Remote file hosting with executable code (e.g., shell)

MITRE ATT&CK

T1189 - Drive-by Compromise T1210 - Exploitation of Remote Services

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2

Core References

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/28568

Exploit vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/27383

Scores

EPSS 0.0205

EPSS Percentile 78.7%

Details

CWE

CWE-94

Status published

Products (1)

small_axe_solutions/weblog 0.3.1

Published Jan 25, 2008

Tracked Since Feb 18, 2026