RCE in Fh54 Justvisual
CVE-2009-3511
Multiple PHP remote file inclusion vulnerabilities in justVisual 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the fs_jVroot parameter to (1) sites/site/pages/index.php, (2) sites/test/pages/contact.php, (3) system/pageTemplate.php, and (4) system/utilities.php.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.021 (80.2th percentile) — read the EPSS interpretation.
Affected products
- Fh54 Justvisual — versions 1.2
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)