CVE-2008-4735: PHP remote file inclusion vulnerability in header.php in Concord Asset, Software, and Ticket system (CoAST)...

Security readout for executives and security teams

This CVE affects Concord Asset, Software, and Ticket system (CoAST) 0.95. A remote attacker could cause the application to load attacker-controlled PHP code through a vulnerable parameter, potentially taking over the web application. Public exploit information exists, but the provided sources do not show confirmed active exploitation. Exposure is likely limited to organizations still running CoAST 0.95, especially internet-facing installations. The source bundle does not identify other affected versions, forks, or downstream products. Prioritize immediately if CoAST 0.95 is present, especially on public systems. The business risk is potential web application compromise, but urgency depends on confirmed deployment and exposure. Mitigation focus: Check vendor or archived advisory guidance for an official fix or supported upgrade path.; Remove or replace CoAST 0.95 if no supported remediation is available.; Restrict public access to affected CoAST deployments until remediation is confirmed..

Prepared

Jun 28, 2026, 11:59 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.