Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-40089 EUVD-2022-43408GHSA-7448-x2vg-9pm2

A remote file inclusion (RFI) vulnerability in Simple College Website v1.0 allows attackers to execute arbitrary code via a crafted PHP fil…

Published Sep 22, 2022 · Updated May 27, 2025 · Assigned by mitre

Description

A remote file inclusion (RFI) vulnerability in Simple College Website v1.0 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is exploitable when the directive allow_url_include is set to On.

References