CVE-2008-6287: Multiple PHP remote file inclusion vulnerabilities in Broadcast Machine 0.1 allow remote attackers to execu...

Security readout for executives and security teams

Broadcast Machine 0.1 has remote file inclusion flaws that could let an attacker make the PHP application run attacker-controlled code. This matters mainly for organizations still hosting this very old software, especially on public web servers. Exposure is likely limited to legacy Broadcast Machine 0.1 installations. Risk is highest where the application or affected controller files are reachable from the internet. The source metadata does not provide normalized vendor, product, version, or CPE details beyond Broadcast Machine 0.1. Treat this as high priority if Broadcast Machine 0.1 is present on an exposed system. For most modern environments, priority depends on confirming whether this obsolete PHP application exists at all. Mitigation focus: Inventory web assets for Broadcast Machine 0.1 installations.; Retire or replace exposed Broadcast Machine 0.1 deployments where possible.; Restrict external access to affected controller paths until resolved..

Prepared

Jun 28, 2026, 11:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.