What’s Vulnerable › Vulnerabilities

CVE-2008-0567

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 34.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2008-02-05 · updated 2026-06-16
• Weakness: CWE-94

Description

Multiple PHP remote file inclusion vulnerabilities in ChronoEngine ChronoForms (com_chronocontact) 2.3.5 component for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) PPS/File.php, (2) Writer.php, and (3) PPS.php in excelwriter/; and (4) BIFFwriter.php, (5) Workbook.php, (6) Worksheet.php, and (7) Format.php in excelwriter/Writer/.

Affected products

• chronoengine.com Chronoforms: 2.3.5

References

• http://www.securityfocus.com/bid/27531
• https://www.exploit-db.com/exploits/5020
• http://www.securityfocus.com/bid/27531
• https://www.exploit-db.com/exploits/5020

Get alerted when CVE-2008-0567 or the next vulnerability affects your stack