← Database

CVE-2008-4439

CRITICAL CVSS: 10.0 Published: 2008-10-03 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in admin/bin/patch.php in MartinWood Datafeed Studio before 1.6.3 allows remote attackers to execute arbitrary PHP code via a URL in the INSTALL_FOLDER parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected Platforms

Martinwood Datafeed Studio

Weakness Type

CWE-94

References