CyberSec.Space Logo
CVEブラウザに戻る

CVE-2008-4329

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1680%
EPSS Percentile7.43th
Published2008年9月30日
Last Modified2026年4月23日

Vulnerability Description

PHP remote file inclusion vulnerability in cms/system/openengine.php in openEngine 2.0 beta4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the oe_classpath parameter.

Affected Platforms (CPE)

📦
Openengine

Openengine

<= 2.0_beta4
📦
Openengine

Openengine

= 1.7.1
📦
Openengine

Openengine

= 1.8_beta2
📦
Openengine

Openengine

= 1.9_beta1
📦
Openengine

Openengine

= 1.9_beta2
📦
Openengine

Openengine

= 1.9_beta3

References & Advisories

🔗 http://www.securityfocus.com/bid/31413
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/45435
🔗 https://www.exploit-db.com/exploits/6571
🔗 http://www.securityfocus.com/bid/31413
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/45435
🔗 https://www.exploit-db.com/exploits/6571

関連する脆弱性情報

CVE-2008-47199.3

PHP remote file inclusion vulnerability in cms/classes/openengine/filepool.php in openEngine 2.0 beta2, when register_globals is e...

CVE-2007-50357.5

PHP remote file inclusion vulnerability in html/modules/extranet_profile/main.php in openEngine 1.9 beta1 allows remote attackers ...

CVE-2006-22805.0

Directory traversal vulnerability in website.php in openEngine 1.8 Beta 2 and earlier allows remote attackers to list arbitrary di...

CVE-2008-034410.0

Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and remote a...