ol'bookmarks manager version 0.7.5 and earlier
HTTP GET/POST request to frame.php with malicious remote file URL in framefile parameter
Update to patched version; implement input validation with whitelist of allowed file paths; disable remote file inclusion in PHP configuration
If frame.php found with framefile parameter, verify ol'bookmarks version in config files or metadata; presence indicates potential vulnerability if version is 0.7.5 or earlier
find / -type f -name 'frame.php' 2>/dev/null | xargs grep -l 'framefile' 2>/dev/null
AV:N/AC:L/Au:N/C:P/I:P/A:P