CVE-2008-6171

HIGH · CVSS 9.3 EPSS 3.71%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-02-19 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2008-6171

Severity

HIGH

CVSS

9.3

EPSS

3.71%

Original NVD Description

includes/bootstrap.inc in Drupal 5.x before 5.12 and 6.x before 6.6, when the server is configured for "IP-based virtual hosts," allows remote attackers to include and execute arbitrary files via the HTTP Host header.