CVE-2008-4329

CRÍTICO 10.0CVE-2008-4329 · Published 30/09/2008 · updated 16/06/2026

En resumen

CVE-2008-4329 es una vulnerabilidad CRÍTICO (CVSS 10.0) que afecta a openengine (openengine).
Probabilidad de explotación en los próximos 30 días (EPSS): 3.5%, mayor que el 89.2% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
openengine openengine	`= 1.7.1= 1.8_beta2= 1.9_beta1= 1.9_beta2= 1.9_beta3≤ 2.0_beta4`	No fix yet

Description

PHP remote file inclusion vulnerability in cms/system/openengine.php in openEngine 2.0 beta4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the oe_classpath parameter.

References

securityfocus.com/bid/31413 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/45435
exploit-db.com/exploits/6571

Más vulnerabilidades de openengine

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free