Skip to content

CVE-2008-4735 PHP remote file inclusion vulnerability in header.php in Concord Asset, Software, and Ticket system (CoAST) 0.95 allows remote attackers to execute arbitrary PHP code via a URL in the sections_file pa...

HighCVSS 8.5 EPSS 2.3%
Published
Updated
Exploit status
No public exploit known

Description

PHP remote file inclusion vulnerability in header.php in Concord Asset, Software, and Ticket system (CoAST) 0.95 allows remote attackers to execute arbitrary PHP code via a URL in the sections_file parameter.

Affected products

ProductAffected versionsFixed in
coastal coast = 0.95 No fix listed

References

  • 32050 third-party-advisory vendor-advisory
  • 31461 exploit vdb-entry
  • 6598 exploit