CVE-2009-3188

The CVE-2009-3188 entry concerns phpSANE 0.5.0, where the save.php script’s file_save parameter allows remote file inclusion. The root cause is insufficient sanitization of user-supplied input used in including PHP code, enabling an attacker to execute arbitrary PHP on the server. Documented impa...