CVEvulnerability

CVE-2008-4735

8.5 HIGH Published 2008-10-24 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-10-24
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
8.5 HIGH — AV:N/AC:M/Au:S/C:C/I:C/A:C
Weaknesses
CWE-94

Description

PHP remote file inclusion vulnerability in header.php in Concord Asset, Software, and Ticket system (CoAST) 0.95 allows remote attackers to execute arbitrary PHP code via a URL in the sections_file parameter.

Affected configurations

• coastal coast 0.95

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References