CVE-2008-6761

Name of the Vulnerable Software and Affected Versions: Flexcustomer version 0.0.6

Description: A static code injection issue exists, potentially allowing remote attackers to inject arbitrary PHP code into const.inc.php via the installdbname parameter, also known as the Database Name field.

Recommendations: For Flexcustomer version 0.0.6, as a temporary workaround, consider restricting access to the admin/install.php file until the issue is resolved. To fully resolve the issue, follow the installation instructions and delete the admin/install.php file after installation.