CVE-2008-4206

CVE-2008-4206 is a remote file inclusion vulnerability affecting Attachmax Dolphin 2.1.0 and earlier versions, specifically when the register_globals PHP setting is enabled. An attacker can exploit this by injecting a malicious URL into the "rel_path" parameter, leading to arbitrary PHP code execution. The vulnerability has a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. While there is an ExploitDB entry (EDB-6468), there is no evidence of active exploitation, Metasploit or Nuclei modules, or significant community discussion or media coverage.