CVE-2009-1779: PHP remote file inclusion vulnerability in admin.php in Frax.dk Php Recommend 1.3 and earlier allows remote...

Security readout for executives and security teams

This CVE describes a remote file inclusion flaw in Frax.dk Php Recommend 1.3 and earlier. If the vulnerable PHP application is exposed, an attacker may be able to make it load attacker-controlled PHP and run code on the server. The provided sources do not name a patch or confirm active exploitation. Exposure is likely limited to legacy sites still running Frax.dk Php Recommend 1.3 or earlier, especially where admin.php is reachable from the internet. Most modern environments are unlikely to have this niche 2009-era PHP component unless it remains embedded in an old web property. Prioritize confirmation over broad emergency response. If the product is found on an internet-facing server, remediate quickly because the reported impact is server-side code execution. If not present, document non-exposure and close with normal vulnerability management evidence. Mitigation focus: Inventory web assets for Frax.dk Php Recommend and exposed admin.php files.; Remove or replace the application if it is still deployed.; Check vendor or archived maintainer guidance for patched versions or retirement advice..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.