high7.5Public exploit code
CVE-2009-3323
Multiple PHP remote file inclusion vulnerabilities in BAnner ROtation System mini (BAROSmini) 0.32.595 allow remote attackers to execute arbitrary PHP code via…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BAnner ROtation System mini - Multiple Remote File Inclusions2009-09-21 · webapps · multiple · Verified
Impact
Multiple PHP remote file inclusion vulnerabilities in BAnner ROtation System mini (BAROSmini) 0.32.595 allow remote attackers to execute arbitrary PHP code via a URL in the baros_path parameter to (1) include/common_functions.php, and the main_path parameter to (2) lib_users.php, (3) lib_stats.php, and (4) lib_slots.php in include/lib/.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Robig | Barosmini | Version 0.32.595 |