CVE-2008-6138: Webbiscuits Modules Controller

High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in adminhead.php in WebBiscuits Modules Controller 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter.

Affected products

• Webbiscuits Modules Controller: up to and including 1.1

Published 2009-02-14. Last modified 2026-06-16.