← Database

CVE-2009-2378

HIGH CVSS: 7.5 Published: 2009-07-08 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in formmailer.admin.inc.php in Jax FormMailer 3.0.0 allows remote attackers to execute arbitrary PHP code via a URL in the BASE_DIR[jax_formmailer] parameter.

Affected Platforms

Jtr Jax Formmailer

Weakness Type

CWE-94

References