CVE-2008-6748
Eval injection vulnerability in Megacubo 5.0.7 allows remote attackers to inject and execute...
Eval injection vulnerability in Megacubo 5.0.7 allows remote attackers to inject and execute arbitrary PHP code via the play action in a mega:// URI.
Exploit likelihood
What each source reports
NVD Score used
Eval injection vulnerability in Megacubo 5.0.7 allows remote attackers to inject and execute arbitrary PHP code via the play action in a mega:// URI.
- Record
CVE-2008-6748- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE List No score
Eval injection vulnerability in Megacubo 5.0.7 allows remote attackers to inject and execute arbitrary PHP code via the play action in a mega:// URI.
- Record
CVE-2008-6748- Updated
- 2026-11-02
EUVDEUVD-2008-6708 No score
Eval injection vulnerability in Megacubo 5.0.7 allows remote attackers to inject and execute arbitrary PHP code via the play action in a mega:// URI.
- Record
EUVD-2008-6708- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rxqx-q7w3-5qc5 No score
Eval injection vulnerability in Megacubo 5.0.7 allows remote attackers to inject and execute...
Eval injection vulnerability in Megacubo 5.0.7 allows remote attackers to inject and execute arbitrary PHP code via the play action in a mega:// URI.
- Record
GHSA-rxqx-q7w3-5qc5- Weakness
- CWE-94
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Megacubo 5.0.7 - 'mega://' Remote 'eval()' Injection | 2008-12-30 |
| Exploit-DB | Megacubo 5.0.7 - 'mega://' Arbitrary File Download and Execute | 2009-01-01 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-6748 is a high vulnerability (CVSS 9.3) in Megacubo, published April 24, 2009. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.74%, the 89th percentile. No source names a fixed version.
References
securityfocus.com/bid/33062
secunia.com/advisories/33326
retrogod.altervista.org/9sg_megacubo.html
exchange.xforce.ibmcloud.com/vulnerabilities/47697
exploit-db.com/exploits/7623
osvdb.org/51106
nvd.nist.gov/vuln/detail/CVE-2008-6748
github.com/advisories/GHSA-rxqx-q7w3-5qc5