CVE-2009-4085

CVE-2009-4085 describes a remote file inclusion (RFI) in PHP Traverser 0.8.0. The vulnerability affects the file assets/plugins/mp3_id/mp3_id.php, where an attacker can supply a URL via the GLOBALS[BASE] parameter to execute arbitrary PHP code on the server. The CVSSv2 base score is 7.5 (HIGH) wi...