CVE-2008-6748: Megacubo

High severity, CVSS 9.3. EPSS: 3.7% chance of exploitation in the next 30 days.

Eval injection vulnerability in Megacubo 5.0.7 allows remote attackers to inject and execute arbitrary PHP code via the play action in a mega:// URI.

Affected products

• Megacubo Megacubo: version 5.0.7 only

Published 2009-04-24. Last modified 2026-06-16.