CVE-2009-4543: PHP remote file inclusion vulnerability in index.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allo...

Security readout for executives and security teams

CVE-2009-4543 is an old but serious file inclusion flaw in Cromosoft Technologies Facil Helpdesk 2.3 Lite. A remote attacker may be able to make the application load attacker-controlled PHP code, leading to server-side code execution. Evidence does not show confirmed active exploitation. Exposure is most likely where Facil Helpdesk 2.3 Lite is still deployed and reachable over the internet. The affected inventory is incomplete in the source bundle, so teams should verify product presence directly rather than relying on CPE matching. Treat as high priority if the product is present, especially on public systems. The business risk is server compromise, but urgency depends on whether this obsolete helpdesk software is deployed. Mitigation focus: Identify and prioritize any Facil Helpdesk 2.3 Lite deployments.; Remove public internet access until vendor guidance or replacement is confirmed.; Check vendor or trusted advisory sources for an upgrade or supported fix..

Prepared

Jun 28, 2026, 09:59 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.