TI-2008-06340 CVE-2008-6651 · GHSA-cxv6-gvcr-65jmStatic code injection vulnerability in edithistory.php in OxYProject OxYBox 0.85 allows…Priority MEDIUM 49Static code injection vulnerability in edithistory.php in OxYProject OxYBox 0.85 allows remote attackers to inject arbitrary PHP code into oxyhistory.php via the oxymsg parameter.CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.03501 · Published 2009-04-07 · No fix listed CWE-94