← Database

CVE-2008-3166

CRITICAL CVSS: 9.3 Published: 2008-07-14 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in modules/global/inc/content.inc.php in BoonEx Ray 3.5, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the sIncPath parameter.

Affected Platforms

Boonex Ray

Weakness Type

CWE-94

References