CVE-2008-1043: Linux Web Shop PHP User Base

High severity, CVSS 7.5. EPSS: 48.6% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in templates/default/header.inc.php in Linux Web Shop (LWS) php User Base 1.3 BETA allows remote attackers to execute arbitrary PHP code via a URL in the menu parameter.

Affected products

• Linux Web Shop PHP User Base: version 1.3 only

Published 2008-02-27. Last modified 2026-06-16.