CVE-2009-4693

Multiple PHP remote file inclusion vulnerabilities in GraFX MiniCWB 2.3.0 allow remote attackers to execute arbitrary PHP code via a URL in the LANG parameter…

published March 10, 2010

CVSS
—
EPSS
2%
Percentile
83.2
In the wild
Unconfirmed
What it is

Multiple PHP remote file inclusion vulnerabilities in GraFX MiniCWB 2.3.0 allow remote attackers to execute arbitrary PHP code via a URL in the LANG parameter to (1) en.inc.php, (2) hu.inc.php, (3) no.inc.php, (4) ro.inc.php, and (5) ru.inc.php in language/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02304 · 83.2th percentile
Published
2010-03-10T22:00Z
EPSS history
Timeline
  • 10 MAR 22:00Z
    Multiple PHP remote file inclusion vulnerabilities in GraFX MiniCWB 2.3.0 allow remote attackers to execute arbitrary PHP code via a URL in the LANG parameter…
    cvelistv5