CVE-2008-0287: PHP remote file inclusion vulnerability in VisionBurst vcart 3.3.2 allows remote attackers to execute arbit...

Security readout for executives and security teams

VisionBurst vcart 3.3.2 reportedly lets an attacker make the application load PHP code from an attacker-chosen URL. If the vulnerable storefront is still internet-facing, compromise could move from a web request to server-side code execution. The source bundle does not provide a vendor patch or active exploitation evidence. Exposure is likely limited to legacy VisionBurst vcart 3.3.2 deployments, especially public storefronts. The structured affected-product data is incomplete, so asset inventory should verify the product and version directly. Treat confirmed internet-facing vcart 3.3.2 as urgent legacy risk. The business decision is likely remediation by migration, isolation, or retirement unless a trustworthy vendor fix can be verified. Mitigation focus: Identify and prioritize any VisionBurst vcart 3.3.2 deployments.; Check vendor or archival advisories for a fixed release or supported migration path.; Remove, replace, or isolate unsupported public deployments..

Prepared

Jun 28, 2026, 19:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.