CVE-2008-0648

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-02-07 · updated 2026-06-16
Weakness: CWE-94

Description

Multiple PHP remote file inclusion vulnerabilities in OpenSiteAdmin 0.9.1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to (1) indexFooter.php; and (2) DatabaseManager.php, (3) FieldManager.php, (4) Filter.php, (5) Form.php, (6) FormManager.php, (7) LoginManager.php, and (8) Filters/SingleFilter.php in scripts/classes/.

Affected products

Opensiteadmin: through 0.9.1.1

References

http://www.securityfocus.com/bid/27640
https://www.exploit-db.com/exploits/5068
http://www.securityfocus.com/bid/27640
https://www.exploit-db.com/exploits/5068

Get alerted when CVE-2008-0648 or the next vulnerability affects your stack