CVE-2008-0148: Tutos

High severity, CVSS 10.0. EPSS: 5.8% chance of exploitation in the next 30 days.

TUTOS 1.3 does not restrict access to php/admin/cmd.php, which allows remote attackers to execute arbitrary shell commands via the cmd parameter in a direct request.

Affected products

• Tutos Tutos: version 1.3 only

Published 2008-01-09. Last modified 2026-06-16.