CVE-2009-3307

CVE-2009-3307 affects FSphp 0.2.1 and involves multiple PHP remote file inclusion vulnerabilities. The root cause is insecure handling of the FSPHP_LIB URL parameter in three files (lib/ FSphp.php, navigation.php, and pathwrite.php), allowing remote attackers to include arbitrary PHP code. The NV...