CVE-2008-4439: Martinwood Datafeed Studio

High severity, CVSS 10.0. EPSS: 3.6% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in admin/bin/patch.php in MartinWood Datafeed Studio before 1.6.3 allows remote attackers to execute arbitrary PHP code via a URL in the INSTALL_FOLDER parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

• Martinwood Datafeed Studio: up to and including 1.6.2

Published 2008-10-03. Last modified 2026-06-16.