CVE-2009-0966

2009-03-1910:00:00

mitre

www.cve.org

7.4 High

AI Score

Confidence

High

0.087 Low

EPSS

Percentile

94.6%

JSON

PHP remote file inclusion vulnerability in cross.php in YABSoft Mega File Hosting 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the url parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via … (dot dot) sequences.