CVE-2009-3312

MEDIO 6.8CVE-2009-3312 · Published 23/09/2009 · updated 16/06/2026

In breve

CVE-2009-3312 è una vulnerabilità MEDIO (CVSS 6.8) che riguarda phppollscript (tomex).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 4.2%, superiore al 91.0% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
phppollscript tomex	`≤ 1.3`	No fix yet

Description

PHP remote file inclusion vulnerability in php/init.poll.php in phpPollScript 1.3 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a crafted URL in the include_class parameter.

References

osvdb.org/58181
secunia.com/advisories/36730 · Vendor Advisory
exploit-db.com/exploits/9703
vupen.com/english/advisories/2009/2686 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/53316

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free