CVE-2009-1452

Multiple PHP remote file inclusion vulnerabilities in theme/format.php in SMA-DB 0.3.13 allow remote attackers to execute arbitrary PHP code via a URL in the…

published April 28, 2009

CVSS
—
EPSS
2%
Percentile
83.5
In the wild
Unconfirmed
What it is

Multiple PHP remote file inclusion vulnerabilities in theme/format.php in SMA-DB 0.3.13 allow remote attackers to execute arbitrary PHP code via a URL in the (1) _page_css and (2) _page_javascript parameters. NOTE: the _page_content vector is already is covered by CVE-2009-1450.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02342 · 83.5th percentile
Published
2009-04-28T16:00Z
EPSS history
Timeline
  • 28 APR 16:00Z
    Multiple PHP remote file inclusion vulnerabilities in theme/format.php in SMA-DB 0.3.13 allow remote attackers to execute arbitrary PHP code via a URL in the…
    cvelistv5