CVE-2008-5764: 2500mhz Worksimple

High severity, CVSS 9.3. EPSS: 45.4% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in calendar.php in WorkSimple 1.2.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lang parameter.

Affected products

• 2500mhz Worksimple: version 1.2.1 only

Published 2008-12-30. Last modified 2026-06-16.