CVE-2009-0456: PHP remote file inclusion vulnerability in examples/example_clientside_javascript.php in patForms, as used...

Security readout for executives and security teams

CVE-2009-0456 is a remote file inclusion flaw in a patForms example PHP file, reported in use with Sourdough 0.3.5. If exposed, an attacker could make the server run attacker-controlled PHP code. The source bundle does not provide CVSS, fixed versions, or vendor remediation details. Exposure is most likely in old internet-facing PHP deployments containing patForms example files or Sourdough 0.3.5. Because this CVE is from 2009 and affected-product metadata is sparse, current exposure should be verified by asset inventory and code review rather than assumed broadly present. Give this high priority only where the old PHP component is exposed to the internet or supports a business-critical service. The likely footprint is limited by age, but confirmed exposure could allow full server compromise. Ask teams to verify presence before broad emergency action. Mitigation focus: Check vendor or maintainer guidance for fixed patForms or Sourdough versions.; Remove or block public access to patForms example scripts where not required.; Retire unsupported Sourdough 0.3.5 or patForms deployments if no fix exists..

Prepared

Jun 28, 2026, 11:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.