RCE in Rein Velt Vedit

CVE-2009-3065

PHP remote file inclusion vulnerability in editor/edit_htmlarea.php in Ve-EDIT 0.1.4 allows remote attackers to execute arbitrary PHP code via a URL in the highlighter parameter.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.022 (80.6th percentile) — read the EPSS interpretation.

Affected products

Rein_velt Vedit — versions 01.4
N/a — versions n/a

Weakness classification (CWE)

CWE-94 — Code Injection

References

cve@mitre.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)