Unscored CVE-2009-1463 EUVD-2009-1461GHSA-8xjh-fhmf-89q3

Static code injection vulnerability in razorCMS before 0.4 allows remote attackers to inject arbitrary PHP code into any page by saving con…

Published Apr 28, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

Static code injection vulnerability in razorCMS before 0.4 allows remote attackers to inject arbitrary PHP code into any page by saving content as a .php file.

References

http://razorcms.co.uk/support/viewtopic.php?f=13&t=325
20090416 [follow-up] razorCMS - Multiple Vulnerabilities mailing-list
razorcms-phpfile-code-execution(50359) vdb-entry
20090416 razorCMS - Multiple Vulnerabilities mailing-list
34566 vdb-entry