critical10.0Public exploit code
CVE-2008-4329
PHP remote file inclusion vulnerability in cms/system/openengine.php in openEngine 2.0 beta4 and earlier allows remote attackers to execute arbitrary PHP code …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- openEngine 2.0 beta4 - Remote File Inclusion2008-09-25 · webapps · php · Verified
Impact
PHP remote file inclusion vulnerability in cms/system/openengine.php in openEngine 2.0 beta4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the oe_classpath parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openengine | Openengine | through 2.0_beta4 Versions 1.7.1, 1.8_beta2, 1.9_beta1, 1.9_beta2, 1.9_beta3 |