Security X2Engine 4.1.7 PHP Object Injection September 23, 2014 007admin Leave a comment X2Engine versions 2.8 through 4.1.7 suffer from a PHP object injection vulnerability.