CVE-2009-0513: Multiple PHP remote file inclusion vulnerabilities in WebFrame 0.76 allow remote attackers to execute arbit...

Security readout for executives and security teams

CVE-2009-0513 describes remote file inclusion flaws in WebFrame 0.76. If an exposed site still runs this software, an attacker could make the application load attacker-controlled PHP and potentially take over the web server process. The sources do not show active exploitation or a vendor patch. Likely limited to legacy WebFrame 0.76 deployments. Exposure is highest where the named PHP routes are reachable from the internet and the application accepts attacker-supplied remote URLs through classFiles. Treat as high priority only if WebFrame 0.76 is present or suspected. The business risk is server compromise from an old web application flaw, but current exposure may be low if the product is not deployed. Mitigation focus: Identify and retire any WebFrame 0.76 deployments.; Restrict internet access to affected PHP routes until resolved.; Check vendor or maintainer guidance for any available fixed version..

Prepared

Jun 28, 2026, 11:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.