CVE-2009-2769

2009-08-1417:00:00

mitre

www.cve.org

AI Score

7.5

Confidence

High

EPSS

0.014

Percentile

86.4%

JSON

PHP remote file inclusion vulnerability in include/timesheet.php in Ultrize TimeSheet 1.2.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the config[include_dir] parameter.

References

secunia.com/advisories/36033

www.exploit-db.com/exploits/9297