CVE-2008-2649

N/A

Description

Multiple PHP remote file inclusion vulnerabilities in DesktopOnNet 3 Beta allow remote attackers to execute arbitrary PHP code via a URL in the app_path parameter to (1) don3_requiem.don3app/don3_requiem.php and (2) frontpage.don3app/frontpage.php.

CVE Details

CVSS v3.1 ScoreN/A

Published6/10/2008

Last Modified4/9/2025

Sourcenvd

Honeypot Sightings0

Affected Products

don3:desktoponnet

Weaknesses (CWE)

CWE-94

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/42790(cve@mitre.org)

https://www.exploit-db.com/exploits/5715(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/42790(af854a3a-2127-422b-91ae-364da2661108)

https://www.exploit-db.com/exploits/5715(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.