CVE-2009-2641

2009-07-2819:06:00

mitre

www.cve.org

AI Score

7.4

Confidence

High

EPSS

0.011

Percentile

84.3%

JSON

PHP remote file inclusion vulnerability in app_and_readme/navigator/index.php in School Data Navigator allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via … (dot dot) sequences.

References

www.exploit-db.com/exploits/8924