---
cve: "CVE-2008-7073"
severity: "LOW"
cvss: 3.1
epss: "1.8%"
vendor: "n/a"
kev: false
exploited: false
published: "2009-08-25 10:30:00"
tags: [cve, security, low]
source: tsecurity.de CVE-Dossier
exported: "2026-09-08T08:22:56+02:00"
---

# CVE-2008-7073

> 3.1 LOW · 🧪 PoC

## Beschreibung

PHP remote file inclusion vulnerability in lib/action/rss.php in RSS module 0.1 for Pie Web M{a,e}sher, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lib parameter.

## Exploit-Evidenz

- [EDB-7225 — Pie Web m{a_e}sher mod rss 0.1 - Remote File Inclusion](https://www.exploit-db.com/exploits/7225) ✅

## Referenzen

- <http://www.z0rlu.blogspot.com/2008/11/pie-web-maesher-mod-rss-01-remote-file.html>
- <http://www.securityfocus.com/bid/32465>
- <https://www.exploit-db.com/exploits/7225>
- <https://exchange.xforce.ibmcloud.com/vulnerabilities/46834>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2008-7073) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_