Openengine: >> Openengine >> 1.9_beta1 Security Vulnerabilities
PHP remote file inclusion vulnerability in cms/system/openengine.php in openEngine 2.0 beta4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the oe_classpath parameter.
CVSS Score
10.0
EPSS Score
0.015
Published
2008-09-30
PHP remote file inclusion vulnerability in html/modules/extranet_profile/main.php in openEngine 1.9 beta1 allows remote attackers to execute arbitrary PHP code via a URL in the this_module_path parameter. NOTE: this issue is disputed by CVE because PHP encounters a fatal function-call error on a direct request for the file, before reaching the include statement
CVSS Score
7.5
EPSS Score
0.005
Published
2007-09-24