Openengine: >> Openengine >> 1.7.1 Security Vulnerabilities
PHP remote file inclusion vulnerability in cms/system/openengine.php in openEngine 2.0 beta4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the oe_classpath parameter.
CVSS Score
10.0
EPSS Score
0.015
Published
2008-09-30
Directory traversal vulnerability in website.php in openEngine 1.8 Beta 2 and earlier allows remote attackers to list arbitrary directories and read arbitrary files via a .. (dot dot) in the template parameter.
CVSS Score
5.0
EPSS Score
0.047
Published
2006-05-10