CVE-2009-4543

PHP remote file inclusion vulnerability in index.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to execute arbitrary PHP code…

published January 4, 2010

CVSS
—
EPSS
2%
Percentile
79.7
In the wild
Unconfirmed
What it is

PHP remote file inclusion vulnerability in index.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to execute arbitrary PHP code via a URL in the lng parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. (dot dot) sequences.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01913 · 79.7th percentile
Published
2010-01-04T17:00Z
EPSS history
Timeline
  • 04 JAN 17:00Z
    PHP remote file inclusion vulnerability in index.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to execute arbitrary PHP code…
    cvelistv5