CVE		CVE-2007-2009
Статус		Candidate
Описание		PHP remote file inclusion vulnerability in index.php in SimpCMS Light 04.10.2007 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the site parameter.
Важность		Medium
CVSS score		5,6
CVSS vector		(AV:R/AC:H/Au:NR/C:P/I:P/A:P/B:N)
Phase		Assigned (12.04.2007)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-2009
References		BID : 23439
		BUGTRAQ : 20070411 New bug :)
		FRSIRT : ADV-2007-1348
		MILW0RM : 3705
		SECUNIA : 24851
		VIM : 20070412 true: SimpCMS Light RFI
		XF : simpcms-index-file-include(33572)
SecurityVulns:		Ежедневная сводка ошибок в Web-приложениях (PHP, ASP, JSP, CGI, Perl )