high7.5Public exploit code
CVE-2008-2649
Multiple PHP remote file inclusion vulnerabilities in DesktopOnNet 3 Beta allow remote attackers to execute arbitrary PHP code via a URL in the app_path parame…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- DesktopOnNet 3 Beta - Multiple Remote File Inclusions2008-06-01 · webapps · php · Verified
Impact
Multiple PHP remote file inclusion vulnerabilities in DesktopOnNet 3 Beta allow remote attackers to execute arbitrary PHP code via a URL in the app_path parameter to (1) don3_requiem.don3app/don3_requiem.php and (2) frontpage.don3app/frontpage.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Don3 | Desktoponnet | Version 3 |