high7.5Public exploit code
CVE-2009-0513
Multiple PHP remote file inclusion vulnerabilities in WebFrame 0.76 allow remote attackers to execute arbitrary PHP code via a URL in the classFiles parameter …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- webframe 0.76 - Multiple File Inclusions2009-02-09 · webapps · php · Verified
Impact
Multiple PHP remote file inclusion vulnerabilities in WebFrame 0.76 allow remote attackers to execute arbitrary PHP code via a URL in the classFiles parameter to (1) admin/doc/index.php, (2) index.php, and (3) base/menu.php in mod/.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webframe | Webframe | Version 0.76 |