← Database

CVE-2009-4085

HIGH CVSS: 7.5 Published: 2009-11-29 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in assets/plugins/mp3_id/mp3_id.php in PHP Traverser 0.8.0 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[BASE] parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected Platforms

Jabba Laci Phptraverser

Weakness Type

CWE-94

References