Lucene search
HistorySep 23, 2009 - 12:08 p.m.
CVE-2009-3307
cve
2009
3307
php
remote file inclusion
fsphp
vulnerability
nvd
security
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
Low
0.012 Low
EPSS
Percentile
85.3%
Multiple PHP remote file inclusion vulnerabilities in FSphp 0.2.1 allow remote attackers to execute arbitrary PHP code via a URL in the FSPHP_LIB parameter to (1) FSphp.php, (2) navigation.php, and (3) pathwrite.php in lib/.
Affected configurations
Node
frank_lichtenheldfsphpMatch0.2.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| frank_lichtenheld:fsphp | frank lichtenheld fsphp | eq | 0.2.1 |
Related
cvelist
cvelist
CVE-2009-3307
2009-09-23 10:00:00
nvd
nvd
CVE-2009-3307
2009-09-23 12:08:35
prion
prion
Remote file inclusion
2009-09-23 12:08:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
Low
0.012 Low
EPSS
Percentile
85.3%
Related for CVE-2009-3307