CVE-2009-4085

ALTO 7.5CVE-2009-4085 · Published 29/11/2009 · updated 16/06/2026

En resumen

CVE-2009-4085 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a phptraverser (jabba laci).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.3%, mayor que el 83.2% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
phptraverser jabba_laci	`= 0.8.0`	No fix yet

Description

PHP remote file inclusion vulnerability in assets/plugins/mp3_id/mp3_id.php in PHP Traverser 0.8.0 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[BASE] parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

References

osvdb.org/60466
secunia.com/advisories/37455 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/54378

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free