← Database

CVE-2008-4735

HIGH CVSS: 8.5 Published: 2008-10-24 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in header.php in Concord Asset, Software, and Ticket system (CoAST) 0.95 allows remote attackers to execute arbitrary PHP code via a URL in the sections_file parameter.

Affected Platforms

Coastal Coast

Weakness Type

CWE-94

References