CVE-2009-3511: FH54 Justvisual

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

Multiple PHP remote file inclusion vulnerabilities in justVisual 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the fs_jVroot parameter to (1) sites/site/pages/index.php, (2) sites/test/pages/contact.php, (3) system/pageTemplate.php, and (4) system/utilities.php.

Affected products

• FH54 Justvisual: version 1.2 only

Published 2009-10-01. Last modified 2026-06-16.