Security Advisory

CVE-2009-3511

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2009-10-01 14:00:00
Last updated 2024-08-07 06:31:10
Assigner mitre
State PUBLISHED

Description

Multiple PHP remote file inclusion vulnerabilities in justVisual 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the fs_jVroot parameter to (1) sites/site/pages/index.php, (2) sites/test/pages/contact.php, (3) system/pageTemplate.php, and (4) system/utilities.php.