high7.5Public exploit code
CVE-2009-4156
PHP remote file inclusion vulnerability in modules/pms/index.php in Ciamos CMS 0.9.5 and earlier allows remote attackers to execute arbitrary PHP code via a UR…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Ciamos CMS 0.9.5 - 'module_path' Remote File Inclusion2009-12-01 · webapps · php · Verified
Impact
PHP remote file inclusion vulnerability in modules/pms/index.php in Ciamos CMS 0.9.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the module_path parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ciamos | Ciamos Cms | through 0.9.5 Versions 0.9, 0.9.2 |