Vulnerability Database

296,379

Total vulnerabilities in the database

CVE-2008-4329

PHP remote file inclusion vulnerability in cms/system/openengine.php in openEngine 2.0 beta4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the oe_classpath parameter.

Published: Sep 30, 2008
Updated: Apr 13, 2023
CVE: CVE-2008-4329
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 10
AV:N/AC:L/Au:N/C:C/I:C/A:C

CWEs:

CWE-20

Affected Software
References

Software	From	Fixed in
openengine / openengine	1.9_beta2	1.9_beta2.x
openengine / openengine	1.8_beta2	1.8_beta2.x
openengine / openengine	1.7.1	1.7.1.x
openengine / openengine	1.9_beta1	1.9_beta1.x
openengine / openengine	1.9_beta3	1.9_beta3.x
openengine / openengine	-	2.0_beta4.x

http://www.securityfocus.com/bid/31413
https://exchange.xforce.ibmcloud.com/vulnerabilities/45435
https://www.exploit-db.com/exploits/6571

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo