CVE-2008-4735: Coastal Coast

High severity, CVSS 8.5. EPSS: 2.3% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in header.php in Concord Asset, Software, and Ticket system (CoAST) 0.95 allows remote attackers to execute arbitrary PHP code via a URL in the sections_file parameter.

Affected products

• Coastal Coast: version 0.95 only

Published 2008-10-24. Last modified 2026-06-16.