NetSight
IP …
critical9.8

CVE-2022-40089

A remote file inclusion (RFI) vulnerability in Simple College Website v1.0 allows attackers to execute arbitrary code via a crafted PHP file.

Impact

A remote file inclusion (RFI) vulnerability in Simple College Website v1.0 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is exploitable when the directive allow_url_include is set to On.

Affected products

VendorProductAffected versions
Simple College Website ProjectSimple College Website
Version 1.0

Weakness classification

CWE-98

References