← Database

CVE-2009-3056

HIGH CVSS: 7.5 Published: 2009-09-03 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in include/engine/content/elements/menu.php in KingCMS 0.6.0 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIG[AdminPath] parameter.

Affected Platforms

Bas Bloemsaat Kingcms

Weakness Type

CWE-94

References