CVE-2008-3166: Boonex Ray

High severity, CVSS 9.3. EPSS: 6.2% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in modules/global/inc/content.inc.php in BoonEx Ray 3.5, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the sIncPath parameter.

Affected products

• Boonex Ray: version 3.5 only

Published 2008-07-14. Last modified 2026-06-16.