← Back

Oxybox

oxybox

Vendor: Oxyproject • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Oxyproject
1Oxybox
Apr 23, 2026
Apr 7, 2009
N/A· v4
N/A· v3
10.0 HIGH· v2
Static code injection vulnerability in edithistory.php in OxYProject OxYBox 0.85 allows remote attackers to inject arbitrary PHP code into oxyhistory.php via the oxymsg parameter.