What’s Vulnerable › Vulnerabilities
CVE-2009-3511
- Severity: high (CVSS 7.5 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.1% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2009-10-01 · updated 2026-06-16
- Weakness: CWE-94
Description
Multiple PHP remote file inclusion vulnerabilities in justVisual 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the fs_jVroot parameter to (1) sites/site/pages/index.php, (2) sites/test/pages/contact.php, (3) system/pageTemplate.php, and (4) system/utilities.php.
Affected products
- Fh54 Justvisual: 1.2
References
Get alerted when CVE-2009-3511 or the next vulnerability affects your stack