CVE-2008-6486: PHP remote file inclusion vulnerability in slideshow_uploadvideo.content.php in SharedLog, when register_gl...

Security readout for executives and security teams

CVE-2008-6486 is a remote file inclusion issue in SharedLog. If a site runs the affected PHP file with register_globals enabled, an attacker may be able to make the server load attacker-controlled PHP code. The sources do not provide affected versions, CVSS scoring, or a confirmed vendor patch. Exposure is most likely on old SharedLog installations, especially legacy PHP environments where register_globals remains enabled and the slideshow upload video component is reachable from the web. Prioritize if SharedLog exists on internet-facing systems. The business risk is server-side code execution, but urgency depends on confirming the obsolete product and unsafe PHP setting in your environment. Mitigation focus: Identify any SharedLog deployments and confirm whether the affected file exists.; Disable PHP register_globals wherever present.; Restrict public access to the vulnerable component until vendor guidance is confirmed..

Prepared

Jun 28, 2026, 11:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.