CVEs-PoC/2009/CVE-2009-4223.md

CVE-2009-4223

Description

PHP remote file inclusion vulnerability in adm/krgourl.php in KR-Web 1.1b2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter.

POC

Reference

• http://www.exploit-db.com/exploits/10216
• http://www.exploit-db.com/exploits/10216

Github

• https://github.com/ARPSyndicate/kenzer-templates