Evil-DB LogoEvil-DB
← All CVEs

CVE-2009-0595

medium · 5.1

PHP remote file inclusion vulnerability in skysilver/login.tpl.php in phpSkelSite 1.4, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the theme parameter.

5.1
CVSS
22.2%
EPSS (exploit prob.)
98th
EPSS percentile
2009-02-16
Published

AV:N/AC:H/Au:N/C:P/I:P/A:P

Weaknesses

CWE-94

Affected products

VendorProductAffected versions
phpskelsitephpskelsite1.4

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2009-0595