CVE-2009-0463

CVE-2009-0463 describes a remote file inclusion vulnerability in Groone GLinks 2.1, specifically within the includes/header.php file. Attackers can exploit this by injecting a malicious URL into the 'abspath' parameter, leading to the execution of arbitrary PHP code on the affected server. This vulnerability carries a CVSS score of 6.8, indicating a medium severity risk due to its network-based attack vector and moderate attack complexity, potentially resulting in partial confidentiality, integrity, and availability compromise. While not listed on CISA's KEV catalog, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit or Nuclei modules, or significant community discussion or media coverage.