CVE-2008-2649 Multiple PHP remote file inclusion vulnerabilities in DesktopOnNet 3 Beta allow remote attackers to execute arbitrary PHP code via a URL in the app_path parameter to (1) don3_requiem.don3app/don3_requ...
HighCVSS 7.5
EPSS 2.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple PHP remote file inclusion vulnerabilities in DesktopOnNet 3 Beta allow remote attackers to execute arbitrary PHP code via a URL in the app_path parameter to (1) don3_requiem.don3app/don3_requiem.php and (2) frontpage.don3app/frontpage.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| don3 desktoponnet | = 3-beta | No fix listed |
References
- desktoponnet-apppath-file-include(42790) vdb-entry
- 5715 exploit