CVE-2017-4480 - Unauthenticated Remote File Inclusion

The vulnerability exists in the PHP file inclusion feature of PHP 5.3 and earlier versions. This allows attackers to include arbitrary files on a remote server by manipulating the URL or including user-inputted data in a PHP script.

This is PHP, version 5.3.0 through 5.3.10.
Check with: grep -q "php" /etc/php.ini (on Unix-like systems) or grep -q "php" C:\Windows\System32\inetsrv\php.ini (on Windows)

1. Upgrade to PHP 5.4.0 or later from the official PHP website: https://www.php.net/downloads/
2. If you can't upgrade immediately, consider using a Content Security Policy (CSP) to restrict which files can be included.