NetSight
IP …
high7.5

CVE-2009-1463

Static code injection vulnerability in razorCMS before 0.4 allows remote attackers to inject arbitrary PHP code into any page by saving content as a .php file.

Impact

Static code injection vulnerability in razorCMS before 0.4 allows remote attackers to inject arbitrary PHP code into any page by saving content as a .php file.

Affected products

VendorProductAffected versions
RazorcmsRazorcms
through 0.3
Versions 0.2, 0.3

Weakness classification

CWE-94

References