CVE-2008-4719

2008-10-2318:00:00

mitre

www.cve.org

php

remote file inclusion

openengine

AI Score

7.4

Confidence

Low

EPSS

0.026

Percentile

90.5%

JSON

PHP remote file inclusion vulnerability in cms/classes/openengine/filepool.php in openEngine 2.0 beta2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the oe_classpath parameter, a different vector than CVE-2008-4329.