← Database

CVE-2008-6651

CRITICAL CVSS: 10.0 Published: 2009-04-07 Modified: 2026-06-16

Description

Static code injection vulnerability in edithistory.php in OxYProject OxYBox 0.85 allows remote attackers to inject arbitrary PHP code into oxyhistory.php via the oxymsg parameter.

Affected Platforms

Oxyproject Oxybox

Weakness Type

CWE-94

References