CVE-2009-4264 PHP remote file inclusion vulnerability in components/core/connect.php in AROUNDMe 1.1 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in...
MediumCVSS 6.8
EPSS 1.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
PHP remote file inclusion vulnerability in components/core/connect.php in AROUNDMe 1.1 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the language_path parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aroundme | = 0.5.1 | No fix listed |
| aroundme | = 0.5.2 | No fix listed |
| aroundme | = 0.6.9 | No fix listed |
| barnraiser aroundme | <= 1.1 | No fix listed |
| barnraiser aroundme | = 0.7.7 | No fix listed |