CVE-2009-2641

CVE-2009-2641 describes a PHP remote file inclusion vulnerability in School Data Navigator’s app_and_readme/navigator/index.php. An attacker can cause arbitrary PHP code execution by supplying a crafted URL in the page parameter, and may also include and execute local files via .. sequences. Affe...