RCE in Webframe

CVE-2009-0513

Multiple PHP remote file inclusion vulnerabilities in WebFrame 0.76 allow remote attackers to execute arbitrary PHP code via a URL in the classFiles parameter to (1) admin/doc/index.php, (2) index.php, and (3) base/menu.php in mod/.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.021 (79.8th percentile) — read the EPSS interpretation.

Affected products

  • Webframe — versions 0.76
  • N/a — versions n/a

Weakness classification (CWE)

References