Lucene search
K

CVE-2009-4623

🗓️ 18 Jan 2010 20:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 146 Views🌐 WEB

Multiple PHP remote file inclusion vulnerabilities in Advanced Comment System 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the ACS_path parameter.

Related
Detection
Refs
Paths
Social
ReporterTitlePublishedViews
Family
Circl
CVE-2009-4623
10 Sep 200900:00
circl
Cvelist
CVE-2009-4623
18 Jan 201020:00
cvelist
EUVD
EUVD-2009-4588
7 Oct 202500:30
euvd
NVD
CVE-2009-4623
18 Jan 201020:30
nvd
Prion
Remote file inclusion
18 Jan 201020:30
prion
Prion
Directory traversal
23 Dec 202019:15
prion
RedhatCVE
CVE-2020-35598
22 May 202517:10
redhatcve
NVD
ParameterPositionPathDescriptionCWE
ACS_pathquery paramadvanced_comment_system/index.phpPHP remote file inclusion via ACS_path parameter in index.phpCWE-94
ACS_pathquery paramadvanced_comment_system/admin.phpPHP remote file inclusion via ACS_path parameter in admin.phpCWE-94

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

23 Apr 2026 00:35Current
7.8High risk
Vulners AI Score7.8
CVSS 27.5
EPSS0.0362
146