Published: 30/09/2008 Updated: 29/09/2017

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

PHP remote file inclusion vulnerability in cms/system/openengine.php in openEngine 2.0 beta4 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the oe_classpath parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
openengine openengine 1.9_beta2
openengine openengine 1.9_beta3
openengine openengine 1.7.1
openengine openengine 1.8_beta2
openengine openengine 1.9_beta1
openengine openengine

:::::::- :::::: ::: ;;, `';, ;; ;;;`;;;;, `;;; `[[ [[[[' [[[ [[[[[ '[[ $$, $$$$ $$$ $$$ "Y$c$$ 888_,o8P'88 d888 888 Y88 MMMMP"` "YmmMMMM"" MMM YM [ Discovered by dun \ dun[at]strcpypl ] ######################################################################## # [ op ...

CWE-20 http://www.securityfocus.com/bid/31413 https://exchange.xforce.ibmcloud.com/vulnerabilities/45435 https://www.exploit-db.com/exploits/6571 https://nvd.nist.gov https://www.exploit-db.com/exploits/6571/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2008-4329

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect