EUVD-2008-4310

Malware in sbrugna...

CVE-2008-4719: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in cms/classes/openengine/filepool.php in openEngine 2.0 beta2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the oeclasspath parameter, a different vector than CVE-2008-4329...

CVE-2008-4329: Improper Input Validation

PHP remote file inclusion vulnerability in cms/system/openengine.php in openEngine 2.0 beta4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the oeclasspath parameter...