CVE

CVE-2009-4223

7.5

CVSS

Description

PHP remote file inclusion vulnerability in adm/krgourl.php in KR-Web 1.1b2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter.

Attack Vector

Privileges Req.

User Interaction

Updated Sep 18, 2026View on NVD →

S4E scanner

highProduct Based Web Vulnerabilities~15 seconds

CVE-2009-4223 Scanner

CVE-2009-4223 scanner - Remote File Inclusion (RFI) vulnerability in KR-Web

Used 3.4k times · 5.9k assets checked · url

Scanner page →Run scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →