TI-2009-04007 CVE-2009-4223 · GHSA-v5px-3gjx-x7vrPHP remote file inclusion vulnerability in adm/krgourl.php in KR-Web 1.1b2 and earlier…Priority HIGH 65PHP remote file inclusion vulnerability in adm/krgourl.php in KR-Web 1.1b2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter.CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.54584 · Published 2009-12-07 · No fix listed CWE-94