CVE-2008-1128
phpMyTourney 2 - RCE
Title source: llmDescription
PHP remote file inclusion vulnerability in tourney/index.php in phpMyTourney 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by HACKERS PAL · textwebappsphp
https://www.exploit-db.com/exploits/31320
Scores
EPSS
0.0092
EPSS Percentile
75.7%
Classification
CWE
CWE-94
Status
draft
Affected Products (1)
phpmytourney/phpmytourney
Timeline
Published
Mar 03, 2008
Tracked Since
Feb 18, 2026